Closed thomaschaaf closed 3 years ago
If you're checking the latest images, then you'll find these exact vulnerabilities in Lambda itself.
The images are sometimes a day or two behind what's actually on Lambda – but I've just checked and they're currently up to date.
There's no way to access USB drivers in Lambda, so I assume AWS doesn't think it's a particularly critical patch.
Also looks like the latest amazonlinux:2
docker image has some of these issues too (both python
and python-libs
are outdated)
Most docker repos don't update images just because a new package is released. Best practice if you're worried about these is to keep your own images and update them.
Did you mean the base build
images, not the runtime base images?
If so, I've just pushed some updated versions of them
The current base image seems to have many security issues which are already fixed in amazon linux 2 (according to the description):