fatedier / frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
Apache License 2.0
85.11k stars 13.21k forks source link

[security] Alpine version old , leading to Security vulnerabilities #2730

Closed nitinSophos closed 2 years ago

nitinSophos commented 2 years ago

Bug Description

We are using Old Alpine Image 3.12.0 , latest is 3.15.0 Old alpin image has multiple vulnerabilities including Libssl 1.1.1k , and LibreSSL. (This is not an exhaustive list)

Fix: Update alpine base image in both frpc and frps docker image.

frpc Version

0.38.0

frps Version

0.38.0

System Architecture

linux/amd64

Configurations

N/A

Logs

N/A

Steps to reproduce

No response

Affected area

nitinSophos commented 2 years ago

Raised PR: https://github.com/fatedier/frp/pull/2731