Skip to content

fix: require patched git - #23

Merged
ChiragAgg5k merged 1 commit into
mainfrom
fix-git-cves
Nov 12, 2026
Merged

ChiragAgg5k merged 1 commit into
mainfrom
fix-git-cves

Conversation

@ChiragAgg5k

Copy link
Copy Markdown
Member

Requires git>=2.52.1-r0, fixing CVE-2026-105437, CVE-2026-111760 and CVE-2026-114466 (reported by the helm-chart Trivy scan in open-runtimes/executor, built on 2.1.6).

git 2.52.0-r0 is affected by CVE-2026-105437, CVE-2026-111760 and CVE-2026-114466; Alpine 3.23 ships the fix in 2.52.1-r0.
@appwrite

appwrite Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

🟢 Tier S · Ready to merge

The version constraint is correctly applied to Git in the final image, with no defect found.

The final Alpine image now installs Git with a minimum version of 2.52.1-r0. This ensures the runtime package meets the requested security fix threshold.

Verdict New comments Fixed Still open
✅ Approved 0 0 0
📂 Walkthrough · 1
File Change
Dockerfile Raised the minimum Git version installed in the final image to 2.52.1-r0.

Reviewed 6d05dad · Details · Comment @appwrite review to re-run, or mention @appwrite with a question.

@appwrite appwrite Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Tier S · Looks good to merge. Summary

@ChiragAgg5k
ChiragAgg5k merged commit 41ae81f into main Nov 12, 2026
20 checks passed
@ChiragAgg5k
ChiragAgg5k deleted the fix-git-cves branch November 12, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant