From e583354a6896eb0a1e43b17fe9d0a80482f743d9 Mon Sep 17 00:00:00 2001 From: maksimtech <268127343+maksimtech@users.noreply.github.com> Date: Tue, 7 Jul 2026 15:48:26 +0200 Subject: [PATCH 1/2] fix: gfx/wr/ci-scripts/docker-image/Dockerfile to reduce vulnerabilities (#1) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-SYSTEMD-6277510 - https://snyk.io/vuln/SNYK-DEBIAN11-SYSTEMD-6277510 - https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-7411316 Co-authored-by: snyk-bot --- gfx/wr/ci-scripts/docker-image/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gfx/wr/ci-scripts/docker-image/Dockerfile b/gfx/wr/ci-scripts/docker-image/Dockerfile index 3b7805195d5da..b6ff9370fb8e9 100644 --- a/gfx/wr/ci-scripts/docker-image/Dockerfile +++ b/gfx/wr/ci-scripts/docker-image/Dockerfile @@ -1,4 +1,4 @@ -FROM debian:bullseye-20221205 +FROM debian:11.11 COPY setup.sh /root RUN cd /root && ./setup.sh From 60f161d52331985a35cce3c1d5a71d66eba25771 Mon Sep 17 00:00:00 2001 From: Massimo Date: Tue, 7 Jul 2026 17:07:57 +0200 Subject: [PATCH 2/2] Bug 2053117 - Upgrade WebRender CI Docker base image to debian:13.5. Differential Revision: https://phabricator.services.mozilla.com/D310839 --- gfx/wr/ci-scripts/docker-image/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gfx/wr/ci-scripts/docker-image/Dockerfile b/gfx/wr/ci-scripts/docker-image/Dockerfile index b6ff9370fb8e9..5ad397ac864f2 100644 --- a/gfx/wr/ci-scripts/docker-image/Dockerfile +++ b/gfx/wr/ci-scripts/docker-image/Dockerfile @@ -1,4 +1,4 @@ -FROM debian:11.11 +FROM debian:13.5 COPY setup.sh /root RUN cd /root && ./setup.sh