fix: update libc6 to fix cve-2023-4911

epam · Oct 4, 2023 · 3cde4da · 3cde4da
1 parent 7320fea
commit 3cde4da
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -5,7 +5,8 @@ ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED 1
 
 RUN apt-get update && \
-    apt-get install -y python3 \
+    apt-get install -y libc6=2.35-0ubuntu3.4 \
+                       python3 \
                        python3-venv \
                        python3-dev \
                        python3-pip && \
@@ -39,7 +40,7 @@ WORKDIR /
 
 # Install ca-certificates is required for https connection to InfluxDB
 RUN apt-get update && \
-    apt-get install -y python3 ca-certificates
+    apt-get install -y libc6=2.35-0ubuntu3.4 python3 ca-certificates
 
 COPY --from=dep-builder --chown=appuser /opt/venv /opt/venv
 COPY --chown=appuser ./aidial_analytics_realtime /aidial_analytics_realtime