Skip to content

Commit cedb1a5

Browse files
committed
UID2-6486: Fix CVE-2025-68973 GnuPG out-of-bounds write vulnerability
Update system packages in Docker image to address HIGH severity CVE-2025-68973 affecting GnuPG packages (gnupg, dirmngr, gpg, gpg-agent, gpgconf, gpgsm, gpgv, keyboxd). Vulnerability: Out-of-bounds write in armor_filter function that could lead to memory corruption and potential arbitrary code execution.
1 parent 6be54a1 commit cedb1a5

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

Dockerfile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@
33
######################
44
FROM maven:3.9.11-eclipse-temurin-21
55

6+
# UID2-6486: Fix CVE-2025-68973 (GnuPG out-of-bounds write)
7+
RUN apt-get update && apt-get upgrade -y && rm -rf /var/lib/apt/lists/*
8+
69
WORKDIR /app
710

811
COPY ./pom.xml ./pom.xml

0 commit comments

Comments
 (0)