From c6823e180fb210ba61f4794635f26d432e932e42 Mon Sep 17 00:00:00 2001 From: Roberto Villegas Date: Thu, 22 Oct 2026 15:11:20 -0600 Subject: [PATCH] Build the self-host image on Bun 1.4.4 for the Brotli decoder fix (CVE-2026-111497) --- apps/host-selfhost/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/host-selfhost/Dockerfile b/apps/host-selfhost/Dockerfile index da8dfc6895..df0791cf43 100644 --- a/apps/host-selfhost/Dockerfile +++ b/apps/host-selfhost/Dockerfile @@ -9,14 +9,14 @@ # -e EXECUTOR_WEB_BASE_URL=https://your.domain \ # -v executor-data:/data executor-selfhost -FROM oven/bun:1.3.11@sha256:0733e50325078969732ebe3b15ce4c4be5082f18c4ac1a0f0ca4839c2e4e42a7 AS prod-deps +FROM oven/bun:1.4.4@sha256:1d22548f177f4ff38e0c15baa3c2c46c6c2060ba2d1bc573bb4720b407548f1d AS prod-deps WORKDIR /app COPY . . RUN bun install --frozen-lockfile --production --ignore-scripts --filter @executor-js/host-selfhost \ && bun run apps/host-selfhost/scripts/package-runtime.ts \ && mkdir -p /runtime-data -FROM oven/bun:1.3.11@sha256:0733e50325078969732ebe3b15ce4c4be5082f18c4ac1a0f0ca4839c2e4e42a7 AS build +FROM oven/bun:1.4.4@sha256:1d22548f177f4ff38e0c15baa3c2c46c6c2060ba2d1bc573bb4720b407548f1d AS build RUN apt-get update \ && apt-get install -y --no-install-recommends python3 make g++ \ && rm -rf /var/lib/apt/lists/*