From 6a500420d282f1f957da2a5187f15f6236a15a33 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9=20B=C3=BCsgen?= Date: Thu, 31 Aug 2023 16:32:17 +0200 Subject: [PATCH] fix(borg): :arrow_up: Update borg to version 1.2.5. See Notes! Upgrade to the latest release of borg (1.2.5) which addresses the archives spoofing vulnerability (CVE-2023-36811). BREAKING: While this is a server only image I will mark this release as BREAKING CHANGE. See https://github.com/borgbackup/borg/blob/1.2.5-cvedocs/docs/changes.rst#pre-125-archives-spoofing-vulnerability-cve-2023-36811 for a HOWTO upgrade. --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e8a25fc..4484389 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ ################################################################################ # PIN PACKAGE VERSIONS # ################################################################################ -ARG BORGBACKUP_VERSION="1.2.4" +ARG BORGBACKUP_VERSION="1.2.5" ARG PYTHON_VERSION="3.11" ARG OPENSSH_VERSION="9.3_p2-r0" ARG SED_VERSION="4.9-r2"