From 6a73bda91d5125e8489450458ab9fe75733c804d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 1 Feb 2022 20:45:11 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-2340913 - https://snyk.io/vuln/SNYK-DEBIAN9-GLIBC-2340924 - https://snyk.io/vuln/SNYK-DEBIAN9-OPENSSL-1075328 - https://snyk.io/vuln/SNYK-DEBIAN9-OPENSSL-1569399 - https://snyk.io/vuln/SNYK-DEBIAN9-OPENSSL-339889 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index c5971477ef8e..306ad65399cb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -45,7 +45,7 @@ RUN gulp dist # Now we're going to build our actual application, but not the actual production # image that it gets deployed into. -FROM python:3.7.3-slim-stretch as build +FROM python:3.7.11-slim-stretch as build # Define whether we're building a production or a development image. This will # generally be used to control whether or not we install our development and @@ -121,7 +121,7 @@ RUN set -x \ # Now we're going to build our actual application image, which will eventually # pull in the static files that were built above. -FROM python:3.7.3-slim-stretch +FROM python:3.7.11-slim-stretch # Setup some basic environment variables that are ~never going to change. ENV PYTHONUNBUFFERED 1