Skip to content

Commit d7be3de

Browse files
authored
Fix cves for libcrpyto3 and libssl3 (#3993) (#3995)
Update Dockerfile alpine packages libcrpyto3 and libssl3 to fix cves.
1 parent 2e95993 commit d7be3de

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

build/Dockerfile.nginx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,9 @@ FROM scratch AS nginx-files
55
ADD --link --chown=101:1001 https://cs.nginx.com/static/keys/nginx_signing.rsa.pub nginx_signing.rsa.pub
66

77
FROM nginx:1.29.1-alpine-otel
8-
# the following apk update and add are to address CVE-2025-59375 and CVE-2025-8961/CVE-2025-9165 respectively,
8+
# the following apk update and add are to address CVE-2025-59375, CVE-2025-8961/CVE-2025-9165, CVE-2025-9230, and CVE-2025-9231/CVE-2025-9232 respectively.
99
# once a new base image is available with these package updates, they can be removed.
10-
RUN apk update && apk add --no-cache 'libexpat>=2.7.2-r0' 'tiff>=4.7.1-r0'
10+
RUN apk update && apk add --no-cache 'libexpat>=2.7.2-r0' 'tiff>=4.7.1-r0' 'libcrypto3>=3.5.4-r0' 'libssl3>=3.5.4-r0'
1111

1212
# renovate: datasource=github-tags depName=nginx/agent
1313
ARG NGINX_AGENT_VERSION=v3.3.1

0 commit comments

Comments
 (0)