upgrade setuptools to counter CVE-2024-6345

ministryofjustice · Nov 13, 2024 · 35614a6 · 35614a6
1 parent 9c8322f
commit 35614a6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -45,6 +45,9 @@ RUN make compilemessages
 # The runtime image, used to just run the code provided its virtual environment
 FROM ${ecr_path}${python_version}-${alpine_version} AS runtime
 
+# Workaround for CVE-2024-6345 upgrade the installed version of setuptools to the latest version
+RUN pip install -U setuptools
+
 # Install dependencies for the runtime image
 RUN apk add --no-cache bash make netcat-openbsd