strix/containers
alex s dfdbe4b2ab
fix(image): patch brotli decoder (CVE-2026-111497) in sandbox, bump tag 1.3.0 -> 1.3.1 (#1617)
kali-rolling still ships libbrotli 1.2.0-4; node, curl and python3 in the
sandbox all load the shared libbrotlidec, so a malicious Content-Encoding: br
response would hit the vulnerable decoder. Install Debian's fixed 1.2.0-4.1
packages over Kali's and fail the build if the version is not applied.
2026-10-28 19:58:04 -04:00
..
docker-entrypoint.sh feat(runtime): mount local targets instead of copying them in (#958) 2026-08-02 07:45:10 -07:00
Dockerfile fix(image): patch brotli decoder (CVE-2026-111497) in sandbox, bump tag 1.3.0 -> 1.3.1 (#1617) 2026-10-28 19:58:04 -04:00