chore: update Embit requires Docker image and toolchain rebuild in order to have compliant python version.
What the developer wrote
Authored by odudex
chore: update Embit
requires Docker image and toolchain rebuild in order to have compliant python version.
What changed, and why it matters
This commit updates the build environment for the Krux project. It changes the Docker base image from an older Debian version (Bullseye with GCC 9.5.0) to a newer one (Bookworm with GCC 12) and updates the bundled 'embit' library. The commit message frames this as a routine maintenance chore needed to keep Python versions compatible. There is no indication in the commit itself that this fixes a security vulnerability.
No security action required based on this commit alone. Treat as routine dependency and toolchain maintenance. If security relevance is suspected, verify whether the Embit update addresses any disclosed vulnerabilities by checking the upstream Embit changelog or release notes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies the Dockerfile to use gcc:12-bookworm instead of gcc:9.5.0-bullseye as the build-base stage and updates the vendor/embit submodule or vendored copy. The stated reason is to obtain a compliant Python version for the Embit dependency. No code-level security fix, vulnerability patch, or exploit mitigation is visible in the diff. The change is a build/toolchain maintenance update.
Changed components
Dockerfile build-base stagevendor/embitInspect captured patch +2 / −2
diff --git a/Dockerfile b/Dockerfile
index ac8d9c4..0ed6f09 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -26,7 +26,7 @@
# build-base
# install kendryte (k210), cmake and python dependencies
############
-FROM gcc:9.5.0-bullseye AS build-base
+FROM gcc:12-bookworm AS build-base
RUN apt-get update -y && \
apt-get install --no-install-recommends -y -q \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.