Merge pull request #172 from spacetelescope/hotfix/nss-update

Hotfix/nss update
spacetelescope · Dec 6, 2021 · 596533f · 596533f
2 parents ae8177f + be3af82
commit 596533f
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/changelog.md b/changelog.md
@@ -1 +1 @@
-- base image update to CALDP_20211129_CAL_final
+- force update of nss due to critical security vulnerability
diff --git a/lambda/JobPredict/Dockerfile b/lambda/JobPredict/Dockerfile
@@ -3,6 +3,8 @@ FROM amazon/aws-lambda-python:3.7
 COPY requirements.txt predict_handler.py ./
 # SSL/TLS cert setup for STScI AWS firewalling
 USER root
+# temporary. remove when nss in the base amazon image is secure again
+RUN yum update nss -y
 ENV REQUESTS_CA_BUNDLE=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
 ENV CURL_CA_BUNDLE=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
 

diff --git a/terraform/deploy.sh b/terraform/deploy.sh
@@ -3,7 +3,7 @@
 # ADMIN_ARN is set in the ci node env and should not be included in this deploy script
 
 # variables that will likely be changed frequently
-CALCLOUD_VER="v0.4.31"
+CALCLOUD_VER="v0.4.32"
 CALDP_VER="v0.2.16"
 CAL_BASE_IMAGE="stsci/hst-pipeline:CALDP_20211129_CAL_final"
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		- base image update to CALDP_20211129_CAL_final
		- force update of nss due to critical security vulnerability