Propral: additional base image `amazonlinux:2023`
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 25/100
- Issue 类型
- 功能
- 描述清晰度
- 需要澄清
- 活跃度
- 停滞
- 技术栈
- docker, linux, python
- 领域
- devops, infrastructure
调研方向
该 issue 没有指定文件或测试。首先检查仓库当前的 Python 镜像定义以及基础镜像的选择方式,然后评估是否能够一致地支持 amazonlinux:2023。要完成这项工作,需要 maintainer 就所有权、支持范围和所需的镜像更改作出决定。
由索引模型根据 Issue 内容生成。
描述
Hey guys, first of all, thank you for the work you are doing 🙏
Docker images of python are being shipped millions of times per month (if not per day), and that's awesome 💪
As you most likely know, there is a CVE affecting MiniZip shipped with zlib affecting Debian (buster, bullseye, and bookworm): https://security-tracker.debian.org/tracker/CVE-2023-45853.
I am aware that this vulnerability is effectively impacting minizip (and not really the actual libz binary, which is the one that matters here).
This is CVE is being considered as critical by my company docker image scanner, so we've been trying to find ways to get rid of these secrutiy alerts, and, as a temporrary solution, we decided to switch from python:3.X base image, to a amazonlinux:2023[-minimal] with python3.11 installed there (version maitained by amazon).
Using Amazon Linux 2023 is removing this security alert as amazon backported the fix in its libz (c.f. Amazon document ALAS-2023-410) as the version 1.2.11-33.amzn2023.0.5.
Based on the context above, did this community though of adding amazonlinux:2023 as a base image of python images, to benefit from latest security releases?
Or maybe should it be the responsability of amazon to create such image (like they are doing with amazoncoretto)?
Cheers ✌️
This issue is not necessarily asking to support amazonlinux as a base image, but it's to open a discussion on that matter (and based on the issues of this repository, no one already brought it yet)
- 主要语言
- Dockerfile
- 星标
- 2.8k
- 派生
- 1.1k
- 平均合并
- 3 天 1 小时
- 30 天内合并 PR
- 1
贡献指南
这个仓库没有索引到贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
docker-library/python 的其他 Issue
-
难度 2/5 1-3 小时 新手友好度 72/100
docker-library/python#1080 · 8 条评论 ·
-
难度 4/5 3-5 天 新手友好度 45/100
docker-library/python#1121 · 2 条评论 ·
-
难度 4/5 3-5 天 新手友好度 45/100
docker-library/python#1082 · 10 条评论 · 36 个 reaction ·
-
难度 3/5 1-2 天 新手友好度 55/100
docker-library/python#1076 · 6 条评论 ·
-
难度 3/5 1-2 天 新手友好度 52/100
docker-library/python#1071 · 7 条评论 ·
查看 docker-library/python 的全部 Issue
相似的 Issue
-
kind/bug
难度 2/5 1-3 小时 新手友好度 88/100
kubernetes-sigs/prow#953 · 1 条评论 ·
-
难度 2/5 1-3 小时 新手友好度 78/100
-
automated-analysis bug memory-safety
难度 2/5 1-3 小时 新手友好度 68/100
-
area/entangle bug
难度 1/5 1 小时以内 新手友好度 92/100
-
kind/bug Ubuntu 24
难度 2/5 1-3 小时 新手友好度 72/100
kubernetes-sigs/kubespray#13532 ·