github/OpenHands
1
0
Fork 0
mirror of https://github.com/OpenHands/OpenHands.git synced 2026-03-22 05:37:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: patch GLib CVE-2025-14087 in runtime Docker images (#13403)

Browse Source 
Co-authored-by: openhands <openhands@all-hands.dev>
This commit is contained in:
aivong-openhands
2026-03-19 16:21:24 -05:00
committed by GitHub
parent f706a217d0
commit a8f6a35341
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
openhands/runtime/utils/runtime_templates/Dockerfile.j2
View File

@@ -46,6 +46,9 @@ RUN apt-get update && \
(apt-get install -y --no-install-recommends libgl1 || apt-get install -y --no-install-recommends libgl1-mesa-glx) && \
# Install Docker dependencies
apt-get install -y --no-install-recommends apt-transport-https ca-certificates curl gnupg lsb-release && \
# Security upgrade: patch GLib CVE-2025-14087 (buffer underflow in GVariant parser)
(apt-get install -y --no-install-recommends --only-upgrade \
libglib2.0-0t64 libglib2.0-bin libglib2.0-dev libglib2.0-dev-bin || true) && \
# Security upgrade: patch OpenSSL CVEs (CVE-2025-15467, CVE-2025-69419, CVE-2025-69421, et al.)
(apt-get install -y --no-install-recommends --only-upgrade \
openssl openssl-provider-legacy libssl3t64 || true) && \