From 47252b19b6f842bbbcd06462350df512ecfa0d7f Mon Sep 17 00:00:00 2001 From: Ashir Amin Date: Mon, 5 Oct 2026 08:29:26 -0500 Subject: [PATCH] Bump tunnel server APT_CACHE_BUST to clear libpcre2 CVE-2026-103111 The nightly Trivy scan of cortex-axon-tunnel-server:main flags CVE-2026-103111 in libpcre2-8-0. The cached apt layer (busted 2026-09-14) predates the fix; a fresh layer pulls 10.42-1+deb12u2 from bookworm-security. A local build scans clean for fixable HIGH/CRITICAL. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01R1qAeP7ucrGLTfEakhxQT6 --- server/docker/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/docker/Dockerfile b/server/docker/Dockerfile index 4e105ea..381d94c 100644 --- a/server/docker/Dockerfile +++ b/server/docker/Dockerfile @@ -15,7 +15,7 @@ RUN go build -o /axon-tunnel-server ./cmd/... # Runtime image. FROM debian:bookworm-slim -ARG APT_CACHE_BUST=2026-09-14 +ARG APT_CACHE_BUST=2026-10-05 RUN echo "apt cache bust: $APT_CACHE_BUST" \ && apt-get update && apt-get upgrade -y && apt-get install -y ca-certificates \ && rm -rf /var/lib/apt/lists/*