homelab/stack
1
0
Fork 0
Code Issues 20 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

fix #115: upgrade pillow in zotero image (CVE-2026-25990)
Some checks failed
coverage 99% coverage
ci/woodpecker/push/ci Pipeline was successful
Details
ci/woodpecker/push/infra-ci Pipeline was successful
Details
ci/woodpecker/push/deploy Pipeline failed
Details

Browse Source 
Remaining zotero vulns are Go stdlib and firefox in the
selkies-project/nvidia-egl-desktop base image — unfixable
from our Dockerfile until upstream updates.
This commit is contained in:
kert
2026-03-23 18:09:41 -04:00
parent 2056483d91
commit a10cab2549
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
zotero/Dockerfile
View File

@@ -12,6 +12,9 @@ RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-reco
zotero \ zotero \
&& rm -rf /var/lib/apt/lists/* && rm -rf /var/lib/apt/lists/*
# Patch Python packages with known CVEs from base image
RUN pip install --no-cache-dir --break-system-packages --upgrade "pillow>=12.1.1"
# Create desktop shortcut for Zotero # Create desktop shortcut for Zotero
RUN mkdir -p /home/ubuntu/Desktop \ RUN mkdir -p /home/ubuntu/Desktop \
&& cp /usr/share/applications/zotero.desktop /home/ubuntu/Desktop/ \ && cp /usr/share/applications/zotero.desktop /home/ubuntu/Desktop/ \