Skip to content

Commit d2f5636

Browse files
committed
Docker: Bump Rclone to Beta version to early clear CVEs from Go
[skip ci] Signed-off-by: Viet Nguyen Duc <nguyenducviet4496@gmail.com>
1 parent d0391a9 commit d2f5636

File tree

1 file changed

+12
-12
lines changed

1 file changed

+12
-12
lines changed

.ffmpeg/Dockerfile

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
FROM ubuntu:noble AS builder
22
ARG FFMPEG_VERSION="7.1.1"
3-
ARG RCLONE_VER="v1.69.3"
3+
ARG RCLONE_VER="master"
44
ARG GO_VERSION="latest"
5-
ARG GO_CRYPTO_VERSION="v0.36.0"
6-
ARG GO_OAUTH2_VERSION="v0.27.0"
7-
ARG GO_NET_VERSION="v0.38.0"
8-
ARG GOLANG_JWT_V4_VERSION="v4.5.2"
9-
ARG GOLANG_JWT_V5_VERSION="v5.2.2"
5+
#ARG GO_CRYPTO_VERSION="v0.36.0"
6+
#ARG GO_OAUTH2_VERSION="v0.27.0"
7+
#ARG GO_NET_VERSION="v0.38.0"
8+
#ARG GOLANG_JWT_V4_VERSION="v4.5.2"
9+
#ARG GOLANG_JWT_V5_VERSION="v5.2.2"
1010

1111
USER root
1212

@@ -37,12 +37,12 @@ RUN cd /usr/local/src \
3737
&& cd rclone \
3838
&& git checkout ${RCLONE_VER} \
3939
# Patch deps version in go.mod to fix CVEs
40-
&& sed -i "s|golang.org/x/crypto v.*|golang.org/x/crypto ${GO_CRYPTO_VERSION}|g" go.mod \
41-
&& sed -i "s|golang.org/x/oauth2 v.*|golang.org/x/oauth2 ${GO_OAUTH2_VERSION}|g" go.mod \
42-
&& sed -i "s|golang.org/x/net v.*|golang.org/x/net ${GO_NET_VERSION}|g" go.mod \
43-
&& sed -i "s|github.com/golang-jwt/jwt/v5 v.*|github.com/golang-jwt/jwt/v5 ${GOLANG_JWT_V5_VERSION}|g" go.mod \
44-
&& sed -i "s|github.com/golang-jwt/jwt/v4 v.*|github.com/golang-jwt/jwt/v4 ${GOLANG_JWT_V4_VERSION}|g" go.mod \
45-
&& go mod tidy \
40+
# && sed -i "s|golang.org/x/crypto v.*|golang.org/x/crypto ${GO_CRYPTO_VERSION}|g" go.mod \
41+
# && sed -i "s|golang.org/x/oauth2 v.*|golang.org/x/oauth2 ${GO_OAUTH2_VERSION}|g" go.mod \
42+
# && sed -i "s|golang.org/x/net v.*|golang.org/x/net ${GO_NET_VERSION}|g" go.mod \
43+
# && sed -i "s|github.com/golang-jwt/jwt/v5 v.*|github.com/golang-jwt/jwt/v5 ${GOLANG_JWT_V5_VERSION}|g" go.mod \
44+
# && sed -i "s|github.com/golang-jwt/jwt/v4 v.*|github.com/golang-jwt/jwt/v4 ${GOLANG_JWT_V4_VERSION}|g" go.mod \
45+
# && go mod tidy \
4646
# Build rclone
4747
&& make \
4848
&& mv ~/go/bin/rclone /usr/local/bin/ \

0 commit comments

Comments
 (0)