LinuxServer.io
Missing nginx security fixes in current swag image? #163
|
I'm just wondering why release 5.8.0-ls493 from yesterday contains only nginx 1.30.4 when 1.30.5 and 1.30.6 have been released in the meantime, both with fixes for security issues. Doesn't this make swag users vulnerable? Or are the risks mitigated somehow? |
Replies: 2 comments 2 replies
|
Because at the time of the last build, around 24 hours ago, 1.30.4 was the latest version available in the Alpine repos |
|
That makes sense. Mostly out of curiosity, when is this version expected to land in the swag image and what are the chain of events leading up to that (now that 1.30.6 is in alpinelinux/aports@1e116fd)? |
|
Whenever Github deign to run our package check GHA it'll pick up the changes and trigger a build. It should be hourly but at this point we're lucky if Github schedules runs more frequently than every 3 or 4 hours. |
|
It was just merged to alpine 3.24 repo a few hours ago: alpinelinux/aports@1e116fd |
Because at the time of the last build, around 24 hours ago, 1.30.4 was the latest version available in the Alpine repos