Skip to content

Commit 311ab0c

Browse files
Mossakaclaude
andauthored
fix: upgrade gpgv in squid container to address CVE-2025-68973 (#757)
The squid container's base image includes gpgv 2.4.4-2ubuntu17.3 which is vulnerable to an information disclosure and potential arbitrary code execution via out-of-bounds write. Adding an explicit upgrade step ensures gpgv is updated to the patched version (2.4.4-2ubuntu17.4+). Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 31ef23a commit 311ab0c

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

containers/squid/Dockerfile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ FROM ubuntu/squid:latest
55
RUN set -eux; \
66
PKGS="curl dnsutils net-tools netcat-openbsd openssl squid-openssl"; \
77
apt-get update && \
8+
apt-get install -y --only-upgrade gpgv && \
89
( apt-get install -y --no-install-recommends $PKGS || \
910
(rm -rf /var/lib/apt/lists/* && apt-get update && \
1011
apt-get install -y --no-install-recommends $PKGS) ) && \

0 commit comments

Comments
 (0)