chore(deps): Fix for Python CVEs in Docker Scout report (#26894)

This addresses 3 more CVEs reported on Appsmith Docker image, on
`setuptools`, another `setuptools`, and `urllib3` packages.
This commit is contained in:
Shrikant Sharat Kandula 2023-09-04 15:57:04 +05:30 committed by GitHub
parent ce130c36f5
commit 8b5c1cad87
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -23,7 +23,9 @@ RUN apt-get update \
&& python3 -m venv --prompt certbot /opt/certbot/venv \ && python3 -m venv --prompt certbot /opt/certbot/venv \
&& /opt/certbot/venv/bin/pip install certbot \ && /opt/certbot/venv/bin/pip install certbot \
&& ln -s /opt/certbot/venv/bin/certbot /usr/local/bin \ && ln -s /opt/certbot/venv/bin/certbot /usr/local/bin \
&& apt-get remove --yes git python3-pip python3-venv && rm -rf /opt/certbot/venv/lib/python3.*/site-packages/setuptools* \
&& apt-get remove --yes git python3-pip python3-venv python-setuptools \
&& apt-get autoremove --yes
# Install MongoDB v5.0.14, Redis, NodeJS - Service Layer, PostgreSQL v13 # Install MongoDB v5.0.14, Redis, NodeJS - Service Layer, PostgreSQL v13
RUN curl --silent --show-error --location https://www.mongodb.org/static/pgp/server-6.0.asc | apt-key add - \ RUN curl --silent --show-error --location https://www.mongodb.org/static/pgp/server-6.0.asc | apt-key add - \