fix: update ubuntu package libssl3 (#994)
Co-authored-by: Mohammed Naser <mnaser@vexxhost.com>
diff --git a/images/base/Earthfile b/images/base/Earthfile
index 0c9f856..8b7b2df 100644
--- a/images/base/Earthfile
+++ b/images/base/Earthfile
@@ -1,7 +1,7 @@
VERSION 0.7
image:
- FROM ubuntu:jammy-20240125
+ FROM ubuntu:jammy-20240212
LABEL org.opencontainers.image.source=https://github.com/vexxhost/atmosphere
- # CVE-2023-5678, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727
- DO ../+APT_INSTALL --PACKAGES "libssl3=3.0.2-0ubuntu1.14"
+ # CVE-2023-4641
+ DO ../+APT_INSTALL --PACKAGES "login=1:4.8.1-2ubuntu2.2 passwd=1:4.8.1-2ubuntu2.2"
diff --git a/images/openstack-service/Earthfile b/images/openstack-service/Earthfile
index 5c0552c..ae4ab49 100644
--- a/images/openstack-service/Earthfile
+++ b/images/openstack-service/Earthfile
@@ -47,9 +47,9 @@
END
GIT CLONE --branch ${BRANCH} https://github.com/openstack/requirements /src
RUN \
- sed -i 's/cryptography===36.0.2/cryptography===42.0.0/' /src/upper-constraints.txt && \
- sed -i 's/cryptography===40.0.2/cryptography===42.0.0/' /src/upper-constraints.txt && \
- sed -i 's/cryptography===41.0.7/cryptography===42.0.0/' /src/upper-constraints.txt && \
+ sed -i 's/cryptography===36.0.2/cryptography===42.0.4/' /src/upper-constraints.txt && \
+ sed -i 's/cryptography===40.0.2/cryptography===42.0.4/' /src/upper-constraints.txt && \
+ sed -i 's/cryptography===41.0.7/cryptography===42.0.4/' /src/upper-constraints.txt && \
sed -i 's/Django===3.2.18/Django===3.2.24/' /src/upper-constraints.txt && \
sed -i 's/Flask===2.2.3/Flask===2.2.5/' /src/upper-constraints.txt && \
sed -i 's/Jinja2===3.1.2/Jinja2===3.1.3/' /src/upper-constraints.txt && \