External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): bump Go 1.25 and Pillow 12.2.0 for new Trivy CVEs

Browse Source 
- Go 1.24 -> 1.25: fixes CVE-2026-25679 (HIGH: net/url IPv6 parsing)
- Pillow 12.1.1 -> 12.2.0: fixes CVE-2026-40192 (HIGH: decompression bomb DoS)
This commit is contained in:
SnapOtter
2026-06-08 17:32:34 +08:00
parent 61c587d024
commit d2fff1f87d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/Dockerfile
+2 -2
View File
@@ -47,7 +47,7 @@ RUN --mount=type=cache,id=turbo-cache,target=/app/.turbo \
# on Apple Silicon when cross-compiling for linux/amd64. # on Apple Silicon when cross-compiling for linux/amd64.
# caire imports gioui.org/app which requires CGO on Linux, so we use a # caire imports gioui.org/app which requires CGO on Linux, so we use a
# proper C cross-compiler instead of CGO_ENABLED=0. # proper C cross-compiler instead of CGO_ENABLED=0.
FROM --platform=$BUILDPLATFORM golang:1.24-bookworm@sha256:1a6d4452c65dea36aac2e2d606b01b4a029ec90cc1ae53890540ce6173ea77ac AS caire-builder FROM --platform=$BUILDPLATFORM golang:1.25-bookworm@sha256:a1ae6b6c564f3e0072d70081036827a2705dbcf6b38aaa6d97f5de97fe9abdb4 AS caire-builder
ARG TARGETOS=linux ARG TARGETOS=linux
ARG TARGETARCH ARG TARGETARCH
@@ -239,7 +239,7 @@ RUN --mount=type=cache,target=/root/.cache/pip \
/opt/venv/bin/pip install --upgrade "pip==25.1.1" && \ /opt/venv/bin/pip install --upgrade "pip==25.1.1" && \
/opt/venv/bin/pip install wheel setuptools && \ /opt/venv/bin/pip install wheel setuptools && \
/opt/venv/bin/pip install \ /opt/venv/bin/pip install \
Pillow==12.1.1 \ Pillow==12.2.0 \
numpy==1.26.4 \ numpy==1.26.4 \
opencv-python-headless==4.10.0.84 opencv-python-headless==4.10.0.84