gsadmin/meet
1
0
Fork 0
mirror of https://github.com/suitenumerique/meet.git synced 2026-08-27 18:56:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

⬆️(frontend) upgrade libcrypto3 and libssl3 to 3.5.7-r0

Browse Source 
Patches CVE-2026-45447 (HIGH), heap use-after-free in OpenSSL
PKCS7_verify(), flagged by Trivy scan of the frontend image.

- libcrypto3: 3.5.6-r0 -> 3.5.7-r0
- libssl3: 3.5.6-r0 -> 3.5.7-r0

Ref: https://avd.aquasec.com/nvd/cve-2026-45447
This commit is contained in:
lebaudantoine
2026-06-11 16:07:57 +02:00
committed by aleb_the_flash
parent 61f7ad05e9
commit 90f95ab2a9
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/dinum-frontend/Dockerfile
+2
View File
@@ -60,6 +60,8 @@ USER root
# Security patches for known CVEs # Security patches for known CVEs
RUN apk update && apk upgrade \ RUN apk update && apk upgrade \
libcrypto3>=3.5.7-r0 \
libssl3>=3.5.7-r0 \
musl \ musl \
musl-utils \ musl-utils \
zlib>=1.3.2-r0 \ zlib>=1.3.2-r0 \
src/frontend/Dockerfile
+2
View File
@@ -45,6 +45,8 @@ USER root
# Security patches for known CVEs # Security patches for known CVEs
RUN apk update && apk upgrade \ RUN apk update && apk upgrade \
libcrypto3>=3.5.7-r0 \
libssl3>=3.5.7-r0 \
musl \ musl \
musl-utils \ musl-utils \
zlib>=1.3.2-r0 \ zlib>=1.3.2-r0 \