updated base image version in Dockerfile

aws-solutions · Oct 26, 2023 · 2e6a0d6 · 2e6a0d6
1 parent b89bea4
commit 2e6a0d6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,7 @@
  ### Fixed
  - Updated @babel/traverse to mitigate [CVE-2023-45133](https://github.com/aws-solutions/cost-optimizer-for-amazon-workspaces/pull/61)
  - Updated urllib3 to mitigate [CVE-2023-45803](https://github.com/aws-solutions/cost-optimizer-for-amazon-workspaces/pull/59)
+ - Updated the base python image in the Dockerfile used to fix the following CVEs: [CVE-2023-29491](https://nvd.nist.gov/vuln/detail/CVE-2023-29491), [CVE-2023-4911](https://nvd.nist.gov/vuln/detail/CVE-2023-4911), [CVE-2023-36054](https://nvd.nist.gov/vuln/detail/CVE-2023-36054), [CVE-2023-3446](https://nvd.nist.gov/vuln/detail/CVE-2023-3446), [CVE-2023-3817](https://nvd.nist.gov/vuln/detail/CVE-2023-3817).
 
 ## [2.6.3] - 2023-09
  ### Fixed

diff --git a/source/Dockerfile b/source/Dockerfile
@@ -1,12 +1,10 @@
-FROM public.ecr.aws/docker/library/python:3.11.5-slim-bullseye
+FROM public.ecr.aws/docker/library/python:3.11.6-slim-bullseye
 COPY workspaces_app /workspaces_app
 
 WORKDIR /workspaces_app
-
 RUN adduser -uid 1001 nonroot
 USER nonroot
 
 RUN pip install -r ./setup_requirements.txt
 RUN pip install -r ./requirements.txt
-
 CMD python3 ./main.py