Security vulnerability fix - how to update linux base image on container app

[keith-navys-ai]

Greetings -

How can I upgrade the linux base image to address security vulnerabilities with libxml2 and setuptools?

I don't see a main Dockerfile, just the two for backend/frontend.

[pamelafox]

There's only one Dockerfile, in backend, as the backend loads in a copy of the built frontend files.
I think that we need to upgrade to Python 3.12 (or possibly even 3.13?), as that's how I resolved the libxml vulnerability in another repo.

That means changing this line:

FROM python:3.11-bullseye

Although I still see a warning in VS Code from the Docker that 3.12 and 3.13 have vulnerabilities too. The other approach is to upgrade from bullseye to a later version of Debian, that might be the solution here.

Here's a Dockerfile which had no vulnerabilities as of 2 months ago:
https://github.com/microsoft/Build25-BRK234/blob/main/src/Dockerfile

[keith-navys-ai]

This seems to have worked - thanks!