Skip to content

Fix OpenSSL CVE and bump software versions

Latest

Choose a tag to compare

@github-actions github-actions released this 10 Sep 22:17
· 25 commits to master since this release
624ad8e

Security

  • Patches CVE-2026-14456 (OpenSSL denial-of-service via unbounded memory growth in QUIC servers) by pinning libssl3/libcrypto3 to 3.5.8-r0 in both Containerfiles. Alpine 3.24.1's base install still carries the vulnerable 3.5.7-r0.

What's Changed

  • build(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #70
  • build(deps): bump hadolint/hadolint-action from 3.3.0 to 3.4.0 by @dependabot[bot] in #71
  • build(deps): bump crate-ci/typos from 1.48.0 to 1.49.0 by @dependabot[bot] in #72
  • build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #73
  • build(deps): bump hadolint/hadolint-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #74
  • build(deps): bump redhat-actions/buildah-build from 3.0.2 to 3.1.0 by @dependabot[bot] in #75
  • build(deps): bump crate-ci/typos from 1.49.0 to 1.49.1 by @dependabot[bot] in #76
  • build(deps): bump crate-ci/typos from 1.49.1 to 1.50.0 by @dependabot[bot] in #77
  • build(deps): bump crate-ci/typos from 1.50.0 to 1.50.1 by @dependabot[bot] in #78
  • build(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #79
  • build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by @dependabot[bot] in #80

Full Changelog: v0.9.20260804...v0.9.20260911