mirror of
https://github.com/usestrix/strix.git
synced 2026-11-01 07:02:32 +00:00
kali-rolling still ships libbrotli 1.2.0-4; node, curl and python3 in the sandbox all load the shared libbrotlidec, so a malicious Content-Encoding: br response would hit the vulnerable decoder. Install Debian's fixed 1.2.0-4.1 packages over Kali's and fail the build if the version is not applied. |
||
|---|---|---|
| .. | ||
| docker-entrypoint.sh | ||
| Dockerfile | ||