imgproxy

v4.0.4 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1mo Media Servers

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

avif crop-image docker go image image-processing

+9 more

image-server jpeg jpeg-xl jxl libvips microservice png resize-images webp

Affected surfaces

auth

Summary

AI summary

Fixed AWS credentials handling for IMGPROXY_S3_ASSUME_ROLE_ARN and resolved a rare deadlock in ML model inference.

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes a rare deadlock during ML model inference. Fixes a rare deadlock during ML model inference. Source: llm_adapter@2026-06-09 Confidence: high	—
Bugfix	Medium	Fixes AWS credentials lifetime issue when IMGPROXY_S3_ASSUME_ROLE_ARN is used. Fixes AWS credentials lifetime issue when IMGPROXY_S3_ASSUME_ROLE_ARN is used. Source: llm_adapter@2026-06-09 Confidence: low	—

Full changelog

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track imgproxy

Get notified when new releases ship.

About imgproxy

Fast and secure standalone server for resizing and converting remote images.

v4.0.0 Removed deprecated OpenTelemetry configuration options (endpoint, protocol, GRPC_INSECURE, propagators, connection timeout); use corresponding OTEL_* variables
v4.0.0 Docker images now built on Ubuntu 22.04; minimum libc version required is 2.35
v4.0.0 Minimum libc version requirement changed to 2.35
v4.0.0 Custom New Relic metrics renamed from imgproxy.X to Custom/imgproxy/X
v4.0.0 Log format and naming changed to match documentation