From c59631efe400b3722321a233e642fc0695b46112 Mon Sep 17 00:00:00 2001 From: Cristiano Betta Date: Tue, 13 Oct 2026 23:19:37 +0100 Subject: [PATCH] Fresh nginx base digest, for libtiff's security fix jiji's nightly scan found libtiff 4.7.1 (CVE-2026-4775, high) in the image, there for nginx's image-filter module. The current digest of the same 1.30-alpine tag carries tiff 4.7.2 and scans clean. Still nginx 1.30.5. Co-Authored-By: Claude Opus 5.5 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 8244a3a..4b3f958 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # The site is plain files, served by nginx with Netlify's URL rules # (nginx.conf). It runs on jiji, behind Caddy and the Cloudflare tunnel. -FROM mirror.gcr.io/nginxinc/nginx-unprivileged:1.30-alpine@sha256:15c994d10d6d78658721c3bcafff14cb281fba2a4bdf9d5ba92c416a472516e3 +FROM mirror.gcr.io/nginxinc/nginx-unprivileged:1.30-alpine@sha256:56b8272e43a0525f67aed68d1e0794a712d10e3e45a563e118e9a77c817e6f86 COPY nginx.conf /etc/nginx/conf.d/default.conf COPY --link index.html robots.txt /srv/site/