Vulnerability CVE-2021-3520

[MrRedHead]

Trivy Vulnerability Scanner detects CVE-2021-3520 with score of 9.8 detected in latest (alpine3.15-r0) version.
https://avd.aquasec.com/nvd/cve-2021-3520/

Please update lz4-libs to version: 1.9.3-r1 or higher.

[tyranron]

@MrRedHead thanks!

Should be fixed now:

$ docker run --rm --entrypoint sh instrumentisto/rsync-ssh:alpine3.15-r1 -c 'apk list | grep lz4'
WARNING: Ignoring https://dl-cdn.alpinelinux.org/alpine/v3.15/main: No such file or directory
WARNING: Ignoring https://dl-cdn.alpinelinux.org/alpine/v3.15/community: No such file or directory
lz4-libs-1.9.3-r1 x86_64 {lz4} (BSD-2-Clause GPL-2.0-only) [installed]

[MrRedHead]

Trivy shows no vulnerabilities... thanks for the quick fix