feat: always force-upgrade alpine openssl

Force upgrade the alpines openssl to  3.5.4-r0 in order to tackle CVE-2025-9230 (low)
CVE-2025-9231 (low)
CVE-2025-9232 (low)

See: 
https://github.com/Burnett01/rsync-deployments/security/code-scanning/7

https://github.com/Burnett01/rsync-deployments/security/code-scanning/8

https://github.com/Burnett01/rsync-deployments/security/code-scanning/9
This commit is contained in:
Steven 2025-10-07 19:04:58 +02:00 committed by GitHub
parent 96abc27e05
commit 92961b5880
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -2,7 +2,7 @@
FROM drinternet/rsync@sha256:e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527 FROM drinternet/rsync@sha256:e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527
# always force-upgrade rsync to get the latest security fixes # always force-upgrade rsync to get the latest security fixes
RUN apk update && apk add --no-cache --upgrade rsync RUN apk update && apk add --no-cache --upgrade rsync openssl
RUN rm -rf /var/cache/apk/* RUN rm -rf /var/cache/apk/*
# Copy entrypoint # Copy entrypoint