Skip to content

Commit b9ab94d

Browse files
Update manually-builded libheif version to 1.23.4 to patch more DoS vulns
1 parent 8af3900 commit b9ab94d

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

Dockerfile

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,9 +16,9 @@ FROM base AS build
1616
# uploads reach through libvips' heifload. Build a patched one and let
1717
# LD_LIBRARY_PATH shadow the distro package. ENABLE_PLUGIN_LOADING=NO compiles
1818
# the codecs in, avoiding a plugin/core ABI version mismatch.
19-
# https://github.com/strukturag/libheif/security/advisories/GHSA-x8r2-mggj-j6wr
20-
ARG LIBHEIF_VERSION=1.23.3
21-
ARG LIBHEIF_SHA256=79e1f66059e55728e541b671f347e3fa787cedeb61170f4e75efe8aaee6ef59e
19+
# https://github.com/strukturag/libheif/security/advisories/GHSA-xrp2-63fq-jm8q
20+
ARG LIBHEIF_VERSION=1.23.4
21+
ARG LIBHEIF_SHA256=ce7739356637b7371dcc0ae876027f6f692de9c9ace8cd0e9ed8d79a01ea61f
2222

2323
RUN apt-get update -qq && \
2424
apt-get install --no-install-recommends -y build-essential git pkg-config libyaml-dev libpq-dev libvips \

0 commit comments

Comments
 (0)