From f78c40df96dd143521bdd32ccf29497fa3bcd7b2 Mon Sep 17 00:00:00 2001 From: Manohar Reddy Date: Thu, 16 Jul 2026 09:12:43 +0200 Subject: [PATCH] Update OpenSSL to version 3.5.7 in SPDK base Dockerfile Fixes CVE-2026-45447, CVE-2026-42764, CVE-2026-34180, CVE-2026-34183, CVE-2026-42766, CVE-2026-7383, CVE-2026-45445, CVE-2026-9076, CVE-2026-34182, CVE-2026-42767, CVE-2026-34181, CVE-2026-42769, CVE-2026-42768, CVE-2026-45446, CVE-2026-42770 flagged against OpenSSL 3.5.6 in this branch's base image. Master already carries this same bump (d090dffe0); this branch's Dockerfile_spdk_base was missed. --- docker/Dockerfile_spdk_base | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docker/Dockerfile_spdk_base b/docker/Dockerfile_spdk_base index 70023a8068d..fee864aa295 100644 --- a/docker/Dockerfile_spdk_base +++ b/docker/Dockerfile_spdk_base @@ -21,12 +21,12 @@ RUN rm -rf /root/spdk RUN dnf update -y && dnf upgrade -y && \ dnf install -y zlib-devel make gcc perl curl \ libcurl-devel libuuid-devel pulseaudio-libs-devel && \ - wget https://www.openssl.org/source/openssl-3.5.6.tar.gz && \ - tar -xvf openssl-3.5.6.tar.gz && \ - cd openssl-3.5.6 && \ + wget https://www.openssl.org/source/openssl-3.5.7.tar.gz && \ + tar -xvf openssl-3.5.7.tar.gz && \ + cd openssl-3.5.7 && \ ./config && make -j"$(nproc)" && make install && \ echo /usr/local/lib64 > /etc/ld.so.conf.d/openssl.conf && ldconfig && \ - cd .. && rm -rf openssl-3.5.6* + cd .. && rm -rf openssl-3.5.7* # Clone + build AWS SDK RUN git clone --recurse-submodules https://github.com/simplyblock-io/aws-sdk-cpp && \