CVE-2024-28182: manually bumps libnghttp2 to 1.43.0-5.el9_4.3 until f…

…ixed in the base image

Dockerfile

@@ -2,6 +2,10 @@
 # https://catalog.redhat.com/software/containers/ubi9/go-toolset
 FROM registry.access.redhat.com/ubi9/go-toolset:1.21 AS builder
 USER root
+
+# CVE-2024-28182 | TODO: Remove it once fixed in the base image
+RUN dnf --assumeyes install --nodocs libnghttp2-1.43.0-5.el9_4.3
+
 WORKDIR /usr/src/authorino
 COPY ./ ./
 ARG version=latest
@@ -11,6 +15,9 @@ RUN CGO_ENABLED=0 GO111MODULE=on go build -a -ldflags "-X main.version=${version
 # https://catalog.redhat.com/software/containers/ubi9-minimal
 FROM registry.access.redhat.com/ubi9-minimal:latest
 
+# CVE-2024-28182 | TODO: Remove it once fixed in the base image
+RUN microdnf --assumeyes install --nodocs libnghttp2-1.43.0-5.el9_4.3
+
 # shadow-utils is required for `useradd`
 RUN PKGS="shadow-utils" \
     && microdnf --assumeyes install --nodocs $PKGS \