Comments (1)
Thanks for the heads-up on that... unfortunately this is a tricky situation as OpenSSL 1.1.1x
does not seem to exist publicly. Click the 1.1.1x link on that CVE page and you will get a 404 page. They do not list it in their OpenSLL Downloads and there is no 1.1.1x
release on GitHub.
This is because 1.1.1
is EOL and thus no longer supported; these security fixes can be received through specific support contracts with the OpenSSL maintainers. If it's not public, we can't package and distribute it.
See this upstream OpenResty issue regarding upgrading OpenSSL to the 3.0 series.
I'm going to leave the ticket open because operators should be aware of CVEs in their software.
from docker-openresty.
Related Issues (20)
- Point for command injection after openresty download before configure HOT 7
- Cannot able to install luaexpat on top of openresty-centos8 HOT 4
- modsecurity-crs-docker integration HOT 18
- Openresty cannot able to resolve DNS changes HOT 1
- 你的微信号多少,发我邮箱
- ngx_http_upstream_check_module无法添加模块 HOT 1
- fedora aarch64 builds failing HOT 1
- Add Debian 12 `bookworm` release HOT 7
- Upgrade OpenSSL to 1.1.1u HOT 3
- image for new release v1.21.4.2 HOT 7
- Upgrade to openssl 3.0 HOT 1
- HTTP2 Rapid Reset Mitigation HOT 3
- Can't load the cjson module into luajit CLI HOT 1
- Update debian and other images HOT 1
- Builds for Debian 11 and 12 are broken HOT 2
- Image for new release 1.25.3.1 HOT 3
- Adding Third Party Modules to Debian Images Utilizing the ".deb" Installation
- environment variable injected by docker compose is not available in openresty process HOT 2
- RHEL support for openresty HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from docker-openresty.