From 1ae63890ff3c1975b65660e04fb7e3c700b3e4eb Mon Sep 17 00:00:00 2001 From: paul Date: Fri, 28 Nov 2025 17:52:24 +0100 Subject: [PATCH] Fetch patched libpng from edge for frontend runtime --- frontend/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/frontend/Dockerfile b/frontend/Dockerfile index e200a27..1bc7262 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -35,8 +35,8 @@ FROM nginx:1.27-alpine3.21 # Upgrade all packages to fix security vulnerabilities (BusyBox CVEs) RUN apk upgrade --no-cache -# Ensure libpng includes CVE fixes -RUN apk add --no-cache 'libpng>=1.6.51-r0' +# Ensure libpng includes CVE fixes (pull patched version from edge) +RUN apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main 'libpng>=1.6.51-r0' # Install runtime dependencies RUN apk add --no-cache curl