From 8d0715771c622de63cf3ce56fbb3a6a0a2e42d3a Mon Sep 17 00:00:00 2001 From: Riddhesh Sanghvi Date: Fri, 23 Oct 2026 09:16:54 +0530 Subject: [PATCH] fix(nginx-proxy): apply pending Debian updates at build time jwilder/nginx-proxy:1.11.6 is still the latest release, and upstream doesn't rebuild the image between releases, so its Debian 13 packages are frozen at the July snapshot. 39 of them had updates, many from trixie-security (openssl 3.5.7, libexpat1, libpcre2, curl, libc6, tzdata). Upgrading at build time keeps the base patched; nginx itself comes from nginx.org and isn't touched. --- nginx-proxy/Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/nginx-proxy/Dockerfile b/nginx-proxy/Dockerfile index 2a03907..f594631 100644 --- a/nginx-proxy/Dockerfile +++ b/nginx-proxy/Dockerfile @@ -8,7 +8,9 @@ COPY nginx.conf /etc/nginx/nginx.conf COPY version.conf /version.conf COPY default.html /etc/nginx/html/default.html +# The upstream image isn't rebuilt between nginx-proxy releases, so apply pending Debian updates here. RUN apt-get update \ + && apt-get upgrade -y \ && apt-get install --no-install-recommends apache2-utils -y && rm -rf /var/lib/apt/lists/* RUN chmod +x /app/docker-entrypoint.sh