containerfile: upgrade base image pip and jaraco.context

This commit is contained in:
Username
2026-01-20 08:19:41 +01:00
parent aba81f908e
commit 677cdff58d

View File

@@ -30,6 +30,9 @@ FROM python:3.11-alpine
LABEL maintainer="FlaskPaste"
LABEL description="Minimal secure pastebin REST API (Alpine)"
# Upgrade base image pip to fix CVE-2025-8869
RUN pip install --no-cache-dir --upgrade "pip>=25.3" "jaraco.context>=6.1.0"
# Create non-root user
RUN addgroup -g 65532 -S flaskpaste && adduser -u 65532 -S -G flaskpaste flaskpaste