Comments (3)
neomantra
commented on June 28, 2024
Thanks for the report. I've updated the build-from-source flavors and pushing it through CI/CD. I've also upgraded the build-from-source alpine to the latest. This push will rebuild the build-from-source so that alpine-apk will have fresh, tagged release as well.
from docker-openresty.
vihangm
commented on June 28, 2024
Unfortunately for the built-from-upstream images, they still use alpine 3.15.8 which has OpenSSL 1.1.1t-r3 preinstalled.
Running apk upgrade libssl1.1 libcrypto1.1 explicitly does upgrade it to OpenSSL 1.1.1u-r1 but I believe that needs to be an explicit step in the Dockerfile.
Maybe it's worth running a apk upgrade after the apk update (and similar apt-get upgrade for the debian/ubuntu images) to upgrade all the pre-installed packages?
from docker-openresty.
vihangm
commented on June 28, 2024
Nevermind, alpine 3.15.9 was released earlier today and that upgrades the default included OpenSSL version.
The newest image https://hub.docker.com/layers/openresty/openresty/alpine-apk-amd64/images/sha256-2259f28de01f85c22e32b6964254a4551c54a1d554cd4b5f1615d7497e1a09ce uses OpenSSL 1.1.1u
from docker-openresty.
Related Issues (20)
- Openresty cannot able to resolve DNS changes HOT 1
- 你的微信号多少，发我邮箱
- ngx_http_upstream_check_module无法添加模块 HOT 1
- fedora aarch64 builds failing HOT 1
- Add Debian 12 `bookworm` release HOT 7
- image for new release v1.21.4.2 HOT 7
- Upgrade to openssl 3.0 HOT 1
- HTTP2 Rapid Reset Mitigation HOT 3
- Can't load the cjson module into luajit CLI HOT 1
- Update debian and other images HOT 1
- Builds for Debian 11 and 12 are broken HOT 2
- Image for new release 1.25.3.1 HOT 3
- Adding Third Party Modules to Debian Images Utilizing the ".deb" Installation
- OpenSSL 1.1.1x for CVE-2023-5678 HOT 1
- environment variable injected by docker compose is not available in openresty process HOT 2
- RHEL support for openresty HOT 2
- luajit: unknown luaJIT command or jit.* modules not installed HOT 3
- Rebuild image tag "alpine" CVE-2024-25062 HOT 1
- [emerg] 1#1: mkdir() "/var/run/openresty/nginx-client-body" failed HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from docker-openresty.