upgrade libcrypto1.1 and libssl1.1 for vulnerability issue

[lqqlin]

Hello,

I am using below version of clamav image,
mkodockx/docker-clamav:alpine

I get the below security suggestion when I scan image code. Do you have any plan to upgrade libcrypto1.1 and libssl1.1 ？Thanks.

[lqqlin]

Hello,
Do you have any updates?
I scan the Cisco-Talos clamav image(docker pull clamav/clamav), which doesn't have this security issue. Maybe we can use the same version package.

https://github.com/Cisco-Talos/clamav/blob/a45bf34802768ccf7dfd412105ae197274dfe0d5/.github/workflows/cmake.yml
-DOPENSSL_CRYPTO_LIBRARY=/usr/local/opt/openssl@1.1/lib/libcrypto.1.1.dylib
-DOPENSSL_SSL_LIBRARY=/usr/local/opt/openssl@1.1/lib/libssl.1.1.dylib

Looking forward to your reply, thank you.

[lqqlin]

Hello,
Do you have any updates?
Looking forward to your reply, thank you.

[lqqlin]

Hello,
Do you have any updates?
Looking forward to your reply, thank you.

[lqqlin]

Hello,
Here is the details about the vulnerability issue. This is high severity
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-0778
Could you please provide an update?
Thanks.

[lqqlin]

This ticket is closed, since the latest alpine image fix this vulnerability .