mirror of
https://github.com/suitenumerique/meet.git
synced 2026-07-26 11:58:53 +00:00
⬆️(frontend) upgrade libcrypto3 and libssl3 to 3.5.7-r0
Patches CVE-2026-45447 (HIGH), heap use-after-free in OpenSSL PKCS7_verify(), flagged by Trivy scan of the frontend image. - libcrypto3: 3.5.6-r0 -> 3.5.7-r0 - libssl3: 3.5.6-r0 -> 3.5.7-r0 Ref: https://avd.aquasec.com/nvd/cve-2026-45447
This commit is contained in:
committed by
aleb_the_flash
parent
61f7ad05e9
commit
90f95ab2a9
@@ -60,6 +60,8 @@ USER root
|
||||
|
||||
# Security patches for known CVEs
|
||||
RUN apk update && apk upgrade \
|
||||
libcrypto3>=3.5.7-r0 \
|
||||
libssl3>=3.5.7-r0 \
|
||||
musl \
|
||||
musl-utils \
|
||||
zlib>=1.3.2-r0 \
|
||||
|
||||
@@ -45,6 +45,8 @@ USER root
|
||||
|
||||
# Security patches for known CVEs
|
||||
RUN apk update && apk upgrade \
|
||||
libcrypto3>=3.5.7-r0 \
|
||||
libssl3>=3.5.7-r0 \
|
||||
musl \
|
||||
musl-utils \
|
||||
zlib>=1.3.2-r0 \
|
||||
|
||||
Reference in New Issue
Block a user