admin/n8n-enterprise-unlocked
1
0
Fork 0
mirror of https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git synced 2025-12-16 17:46:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: Update packages in base image to resolve CVE-2025-58050 (#19034)

Browse Source 
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
This commit is contained in:
shortstacked
2025-09-01 13:41:33 +01:00
committed by GitHub
parent 71b33277f8
commit bb033fc148
2 changed files with 13 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
docker/images/n8n-base/Dockerfile
View File

@@ -13,24 +13,22 @@ RUN \
apk del .build-deps-fonts && \ apk del .build-deps-fonts && \
find /usr/share/fonts/truetype/msttcorefonts/ -type l -exec unlink {} \; find /usr/share/fonts/truetype/msttcorefonts/ -type l -exec unlink {} \;
# Install essential OS dependencies with pinned versions # Install essential OS dependencies
RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \ RUN echo "https://dl-cdn.alpinelinux.org/alpine/v3.22/main" >> /etc/apk/repositories && echo "https://dl-cdn.alpinelinux.org/alpine/v3.22/community" >> /etc/apk/repositories && \
apk update && \ apk update && \
apk upgrade && \
apk add --no-cache \ apk add --no-cache \
git=2.50.1-r0 \ git \
openssh=10.0_p1-r7 \ openssh \
openssl=3.5.1-r0 \ openssl \
graphicsmagick=1.3.45-r0 \ graphicsmagick \
tini=0.19.0-r3 \ tini \
tzdata=2025b-r0 \ tzdata \
ca-certificates=20241121-r2 \ ca-certificates \
libc6-compat=1.1.0-r4 \ libc6-compat \
jq=1.8.0-r0 jq
# Update npm, install full-icu and npm@11.4.2 to fix brace-expansion vulnerability # Install full-icu
# Remove npm update after vulnerability is fixed in in node image RUN npm install -g full-icu@1.5.0
RUN npm install -g full-icu@1.5.0 npm@11.4.2
RUN rm -rf /tmp/* /root/.npm /root/.cache/node /opt/yarn* && \ RUN rm -rf /tmp/* /root/.npm /root/.cache/node /opt/yarn* && \
apk del apk-tools apk del apk-tools

2
docker/images/n8n/Dockerfile
View File

@@ -62,8 +62,6 @@ RUN cd /usr/local/lib/node_modules/n8n && \
mkdir -p /home/node/.n8n && \ mkdir -p /home/node/.n8n && \
chown -R node:node /home/node chown -R node:node /home/node
# Install npm@11.4.2 to fix brace-expansion vulnerability, remove after vulnerability is fixed in node image
RUN npm install -g npm@11.4.2
RUN cd /usr/local/lib/node_modules/n8n/node_modules/pdfjs-dist && npm install @napi-rs/canvas RUN cd /usr/local/lib/node_modules/n8n/node_modules/pdfjs-dist && npm install @napi-rs/canvas
EXPOSE 5678/tcp EXPOSE 5678/tcp