fix: Explicitly upgrade libssl3 and libcrypto3 for fix CVE-2023-1255

otto-de · Apr 27, 2023 · 53b5b77 · 53b5b77
1 parent 5a3da95
commit 53b5b77
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.talismanrc b/.talismanrc
@@ -98,7 +98,7 @@ fileignoreconfig:
 - filename: frontend/mock-data/data.json
   checksum: 54d46fc6d1dae50a3f45145271ea8ac66e44fd6512e5cf7211073d4d3693c189
 - filename: frontend/package-lock.json
-  checksum: 13733f91bcc41ed2836a4f3bced2be504b2f3150da52b48bc5381e7a29e52abb
+  checksum: 13d5e41f67bcc505de820beeb7dd5dd83f758f87a692ef56d45482c9a0c556a1
 - filename: frontend/src/components/Dashboard.vue
   checksum: 01f4826750f6e9561a2011f6350e9344cc5f29e52487e78fbac5352122cf9b5a
 - filename: frontend/src/components/GridCell.vue

diff --git a/Dockerfile b/Dockerfile
@@ -31,6 +31,8 @@ FROM alpine:3.17.3
 ENV JAVA_HOME=/jre
 ENV PATH="${JAVA_HOME}/bin:${PATH}"
 
+RUN apk upgrade libssl3 libcrypto3
+
 COPY --from=corretto-jdk /jre $JAVA_HOME
 
 EXPOSE 8080