Skip to content

fix: Bump alpine base image to 3.23.5 - #308

Merged
eshepelyuk merged 1 commit into
open-policy-agent:masterfrom
dcchambers:master
Aug 10, 2026
Merged

fix: Bump alpine base image to 3.23.5#308
eshepelyuk merged 1 commit into
open-policy-agent:masterfrom
dcchambers:master

Conversation

@dcchambers

Copy link
Copy Markdown
Contributor

CVE-2026-34182 is fixed in libcrypto3/libssl3, which is included in alpine:3.23.5.

cc @eshepelyuk - if you merge this can you also create a new release for it? Thanks! 🙇

@eshepelyuk eshepelyuk left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

DCO is required

libcrypto3/libssl3 3.5.7-r0 (fixing CVE-2026-34182) landed in the
Alpine v3.23 branch after alpine:3.23.4 was published. Bump to
alpine:3.23.5, which already includes the patched packages.

Signed-off-by: Dakota Chambers <dakotachambers@gmail.com>
@dcchambers

Copy link
Copy Markdown
Contributor Author

@eshepelyuk done!

@eshepelyuk
eshepelyuk merged commit db386bb into open-policy-agent:master Aug 10, 2026
2 checks passed
@dcchambers

Copy link
Copy Markdown
Contributor Author

Thanks for the quick merge!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants