⬆️(frontend) upgrade libcrypto3 and libssl3 to 3.5.7-r0

Patches CVE-2026-45447 (HIGH), heap use-after-free in OpenSSL
PKCS7_verify(), flagged by Trivy scan of the frontend image.

- libcrypto3: 3.5.6-r0 -> 3.5.7-r0
- libssl3: 3.5.6-r0 -> 3.5.7-r0

Ref: https://avd.aquasec.com/nvd/cve-2026-45447
This commit is contained in:
lebaudantoine
2026-06-11 16:07:57 +02:00
committed by aleb_the_flash
parent 61f7ad05e9
commit 90f95ab2a9
2 changed files with 4 additions and 0 deletions
+2
View File
@@ -60,6 +60,8 @@ USER root
# Security patches for known CVEs
RUN apk update && apk upgrade \
libcrypto3>=3.5.7-r0 \
libssl3>=3.5.7-r0 \
musl \
musl-utils \
zlib>=1.3.2-r0 \
+2
View File
@@ -45,6 +45,8 @@ USER root
# Security patches for known CVEs
RUN apk update && apk upgrade \
libcrypto3>=3.5.7-r0 \
libssl3>=3.5.7-r0 \
musl \
musl-utils \
zlib>=1.3.2-r0 \