Skip to content

fix(docker): upgrade Alpine packages to address CVE-2025-15467#1923

Merged
Prashansa-K merged 4 commits into
Kong:mainfrom
juanfe2793:fix/upgrade-openssl-cve-2025-15467
Mar 20, 2026
Merged

fix(docker): upgrade Alpine packages to address CVE-2025-15467#1923
Prashansa-K merged 4 commits into
Kong:mainfrom
juanfe2793:fix/upgrade-openssl-cve-2025-15467

Conversation

@juanfe2793
Copy link
Copy Markdown
Contributor

Add step to the Dockerfile to ensure all base Alpine packages are updated to their latest versions. This fixes a critical OpenSSL vulnerability (CVE-2025-15467) in libssl3 and libcrypto3 that has a public exploit available.

  • libssl3: 3.5.0-r0 → 3.5.5-r0
  • libcrypto3: 3.5.0-r0 → 3.5.5-r0

Reference: https://security.alpinelinux.org/vuln/CVE-2025-15467


This is my first PR contributing to Kong Deck, I appreciate the guidance into the right process for this type of security patches.

Add  step to the Dockerfile to ensure all base Alpine
packages are updated to their latest versions. This fixes a critical
OpenSSL vulnerability (CVE-2025-15467) in libssl3 and libcrypto3
that has a public exploit available.

- libssl3: 3.5.0-r0 → 3.5.5-r0
- libcrypto3: 3.5.0-r0 → 3.5.5-r0

Reference: https://security.alpinelinux.org/vuln/CVE-2025-15467
@CLAassistant
Copy link
Copy Markdown

CLAassistant commented Mar 9, 2026

CLA assistant check
All committers have signed the CLA.

@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 33.54%. Comparing base (efa9eef) to head (9aa70ec).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1923      +/-   ##
==========================================
- Coverage   33.58%   33.54%   -0.05%     
==========================================
  Files          76       76              
  Lines        6711     6711              
==========================================
- Hits         2254     2251       -3     
- Misses       4278     4280       +2     
- Partials      179      180       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@Prashansa-K
Copy link
Copy Markdown
Contributor

Prashansa-K commented Mar 20, 2026

EE and Konnect testing won't be possible here as this branch came from a fork.
The changes submitted don't need those particular tests as well.

OSS and Aikido checks are green.

Allowing this PR.

@Prashansa-K Prashansa-K merged commit 9cce3c6 into Kong:main Mar 20, 2026
14 of 37 checks passed
@Prashansa-K
Copy link
Copy Markdown
Contributor

Thanks for the contribution @juanfe2793!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants