docker: update Alpine tools to fix openssl vulnerability

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 3.4.5
+
+OTHER:
+
+- re-release 3.4.4 to rebuild Docker image with security vulnerabilities fixes
+
 ## 3.4.4 (August 26th, 2021)
 
 OTHER:

Rakefile

@@ -26,7 +26,7 @@ hadolint_version = 'v2.7.0'
 
 desc 'Run hadolint for Dockerfile linting'
 task :hadolint do
-  sh "docker run --rm -i hadolint/hadolint:#{hadolint_version} hadolint --ignore DL3017 --ignore DL3018 - < docker/Dockerfile"
+  sh "docker run --rm -i hadolint/hadolint:#{hadolint_version} hadolint --ignore DL3018 - < docker/Dockerfile"
 end
 
 task default: [:rubocop, :spec, 'bundle:audit', :solargraph]

docker/Dockerfile

@@ -5,7 +5,7 @@ EXPOSE 5353 8080
 ARG DYNDNSD_VERSION
 
 RUN apk --no-cache add openssl ca-certificates && \
-    apk upgrade apk-tools && \
+    apk upgrade apk-tools libcrypto1.1 libssl1.1 && \
     apk --no-cache add ruby ruby-etc ruby-io-console ruby-json ruby-webrick && \
     apk --no-cache add --virtual .build-deps linux-headers ruby-dev build-base tzdata && \
     gem install --no-document dyndnsd -v ${DYNDNSD_VERSION} && \

docker/ci/Dockerfile

@@ -5,6 +5,7 @@ EXPOSE 5353 8080
 COPY pkg/dyndnsd-*.gem /tmp/dyndnsd.gem
 
 RUN apk --no-cache add openssl ca-certificates && \
+    apk upgrade apk-tools libcrypto1.1 libssl1.1 && \
     apk --no-cache add ruby ruby-etc ruby-io-console ruby-json ruby-webrick && \
     apk --no-cache add --virtual .build-deps linux-headers ruby-dev build-base tzdata && \
     gem install --no-document /tmp/dyndnsd.gem && \