From 90f95ab2a954ae4e2b4361a0fe2c1e90ec16d580 Mon Sep 17 00:00:00 2001 From: lebaudantoine Date: Thu, 11 Jun 2026 16:07:57 +0200 Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F(frontend)=20upgrade=20libcry?= =?UTF-8?q?pto3=20and=20libssl3=20to=203.5.7-r0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Patches CVE-2026-45447 (HIGH), heap use-after-free in OpenSSL PKCS7_verify(), flagged by Trivy scan of the frontend image. - libcrypto3: 3.5.6-r0 -> 3.5.7-r0 - libssl3: 3.5.6-r0 -> 3.5.7-r0 Ref: https://avd.aquasec.com/nvd/cve-2026-45447 --- docker/dinum-frontend/Dockerfile | 2 ++ src/frontend/Dockerfile | 2 ++ 2 files changed, 4 insertions(+) diff --git a/docker/dinum-frontend/Dockerfile b/docker/dinum-frontend/Dockerfile index a0fc41d4..a7a5e9ae 100644 --- a/docker/dinum-frontend/Dockerfile +++ b/docker/dinum-frontend/Dockerfile @@ -60,6 +60,8 @@ USER root # Security patches for known CVEs RUN apk update && apk upgrade \ + libcrypto3>=3.5.7-r0 \ + libssl3>=3.5.7-r0 \ musl \ musl-utils \ zlib>=1.3.2-r0 \ diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile index a25f9acb..9a1bf381 100644 --- a/src/frontend/Dockerfile +++ b/src/frontend/Dockerfile @@ -45,6 +45,8 @@ USER root # Security patches for known CVEs RUN apk update && apk upgrade \ + libcrypto3>=3.5.7-r0 \ + libssl3>=3.5.7-r0 \ musl \ musl-utils \ zlib>=1.3.2-r0 \