From fcad79d662432e272ec491b4d28b9f0ed0ebe3da Mon Sep 17 00:00:00 2001
From: lebaudantoine <lebaud.antoine131@gmail.com>
Date: Wed, 18 Mar 2026 11:10:54 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=93=8C(agents)=20unpin=20OpenSSL=20and=20?=
 =?UTF-8?q?related=20dependencies?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The base image now includes OpenSSL 3.5.5, which resolves
CVE-2025-15467.

Remove explicit pinning of OpenSSL and its dependencies.
---
 CHANGELOG.md          | 1 +
 src/agents/Dockerfile | 2 --
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5357d7d3..7dcef235 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -30,6 +30,7 @@ and this project adheres to
 - ⚡️(helm) reduce initialDelaySeconds and add periods seconds #1139
 - 🔒️(backend) avoid information exposure through exception messages #1144
 - ⬆️(dependencies) update PyJWT to v2.12.0 [SECURITY] #1151
+- 📌(agents) unpin OpenSSL and related dependencies #1167
 
 ### Fixed
 
diff --git a/src/agents/Dockerfile b/src/agents/Dockerfile
index f6c3c652..50c29007 100644
--- a/src/agents/Dockerfile
+++ b/src/agents/Dockerfile
@@ -4,8 +4,6 @@ FROM python:3.13-slim AS base
 RUN apt-get update && apt-get install -y \
     libglib2.0-0 \
     libgobject-2.0-0 \
-    "openssl=3.5.4-1~deb13u2" \
-    "libssl3t64=3.5.4-1~deb13u2" \
     && rm -rf /var/lib/apt/lists/*
 
 FROM base AS builder