Lambda Python 3.12 Base Image - ncurses upgrade instructions not working?

0

Following this security advisory to patch my lambda image: https://alas.aws.amazon.com/AL2023/ALAS-2024-554.html

It recommends running dnf update ncurses --releasever 2023.3.20240304 but this does not do anything on the image.

bash-5.2# dnf update ncurses --releasever 2023.3.20240304
Downloading metadata...
Nothing to do.

Trying to figure out how to properly upgrade this package.

Reproduce instructions:

  1. docker pull public.ecr.aws/lambda/python:3.12
  2. docker run --entrypoint bash -it public.ecr.aws/lambda/python:3.12
  3. dnf update ncurses --releasever 2023.3.20240304 from within the container.

Additional notes:

  • It does look like ncurses is installed on the image, but an older version.
bash-5.2# rpm -qa  | grep ncurse
ncurses-libs-6.2-4.20200222.amzn2023.0.5.aarch64
ncurses-base-6.2-4.20200222.amzn2023.0.5.noarch

More image information

{                                                                                                                                                                                                                                               
        "Id": "sha256:3dc8a0fa0b981434a1e3ee55962d30cd3a873ca9c9214250813f5e2d534670f2",                                                                                                                                                            
        "RepoTags": [                                                                                                     
            "public.ecr.aws/lambda/python:3.12",             
            "public.ecr.aws/lambda/python:3.12.2024.03.04.10",                                                            
            "public.ecr.aws/lambda/python:3.12.2024.03.04.10-arm64"                                                       
        ],    

According to the advisory, I'd expect the libraries to be updated to 6.2-4.20200222.amzn2023.0.6

Max
已提問 2 個月前檢視次數 393 次
沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南