Skip to content

Commit 1aacea5

Browse files
authored
Pin Python3.11 package to 3.11.2-6+deb12u2 to avoid changes from CVE-2024-4032 (#716)
* Pin Python3.11 package to 3.11.2-6+deb12u2 to avoid changes from CVE-2024-4032
1 parent 781a5d8 commit 1aacea5

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

python311/Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,8 @@ RUN set -ex \
1919
&& apt-get clean \
2020
&& apt-get update \
2121
&& apt-get -y upgrade \
22-
&& apt-get install -y locales curl tini nano python3.11 python3.11-distutils \
23-
&& apt-get install -y build-essential python3.11-dev \
22+
&& apt-get install -y locales curl tini nano "python3.11=3.11.2-6+deb12u2" "python3.11-minimal=3.11.2-6+deb12u2" "libpython3.11-stdlib=3.11.2-6+deb12u2" "libpython3.11-minimal=3.11.2-6+deb12u2" python3.11-distutils \
23+
&& apt-get install -y build-essential "python3.11-dev=3.11.2-6+deb12u2" "libpython3.11-dev=3.11.2-6+deb12u2" "libpython3.11=3.11.2-6+deb12u2" \
2424
# Setup python /pip
2525
&& update-alternatives --install /usr/bin/python python /usr/bin/python3.11 1 \
2626
&& update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.11 1 \

0 commit comments

Comments
 (0)