From 811540c85f7fa4c647118d8bf6ff257960fc8b89 Mon Sep 17 00:00:00 2001 From: lebaudantoine Date: Thu, 8 Oct 2026 20:27:01 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F(frontend)=20upgrade=20tif?= =?UTF-8?q?f=20to=20fix=20CVE-2026-4775?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Trivy flags tiff 4.7.1-r0 (HIGH) in the nginx alpine 3.24 base of the frontend images. Force the upgrade to 4.7.2-r0. --- CHANGELOG.md | 1 + docker/dinum-frontend/Dockerfile | 2 +- src/frontend/Dockerfile | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index bb65c5338..bc335a291 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -16,6 +16,7 @@ and this project adheres to ### Fixed - 🔒️(backend) prevent editing client id and secret in Django admin +- 🔒️(frontend) upgrade tiff to fix CVE-2026-4775 ## [1.34.0] - 2026-10-07 diff --git a/docker/dinum-frontend/Dockerfile b/docker/dinum-frontend/Dockerfile index 7a85018bc..7e43881ee 100644 --- a/docker/dinum-frontend/Dockerfile +++ b/docker/dinum-frontend/Dockerfile @@ -58,7 +58,7 @@ FROM nginxinc/nginx-unprivileged:1.30.4-alpine3.24 AS frontend-production USER root RUN apk upgrade --no-cache libexpat && \ - apk add --no-cache --upgrade 'pcre2>=10.49-r0' && \ + apk add --no-cache --upgrade 'pcre2>=10.49-r0' 'tiff>=4.7.2-r0' && \ apk del curl USER nginx diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile index c0918de35..0c01e2c3a 100644 --- a/src/frontend/Dockerfile +++ b/src/frontend/Dockerfile @@ -49,7 +49,7 @@ FROM nginxinc/nginx-unprivileged:1.30.4-alpine3.24 AS frontend-production USER root RUN apk upgrade --no-cache libexpat && \ - apk add --no-cache --upgrade 'pcre2>=10.49-r0' && \ + apk add --no-cache --upgrade 'pcre2>=10.49-r0' 'tiff>=4.7.2-r0' && \ apk del curl USER nginx