Vulnerability fix: CVE-2023-5363 (#19)

epam · Nov 14, 2023 · 4afb0eb · 4afb0eb
1 parent c009eef
commit 4afb0eb
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -3,6 +3,9 @@ FROM python:3.11-alpine AS builder
 
 ARG POETRY_VERSION=1.6.1
 
+# Vulnerability fix: CVE-2023-5363
+RUN apk update && apk upgrade --no-cache libcrypto3 libssl3
+
 # Install alpine-sdk to compile some langchain dependencies (numexpr, numpy)
 RUN apk add --no-cache alpine-sdk
 
@@ -32,6 +35,9 @@ ENV PYTHONUNBUFFERED=1
 
 ENV LOG_LEVEL=INFO
 
+# Vulnerability fix: CVE-2023-5363
+RUN apk update && apk upgrade --no-cache libcrypto3 libssl3
+
 # Install libstdc++ to run the compiled dependencies
 RUN apk add --no-cache libstdc++