Is there a fix on the CVE‑2018‑20225 for Python?

General
,
1

Update on the CVE‑2018‑20225

I am trying to use Python Base image versions 3.12.12-alpine3.22 and 3.13.12-alpine3.22. After our internal CVE scans, these are the reported CVEs that are common between the 2:
CVE‑2018‑20225
CVE‑2026‑27171
CVE‑2026‑1703

Do we have any update on the fix for CVE‑2018‑20225? It seems like this is way back 2018 and hasn’t resolved.

Last push to these images were made by doijanky.

If you can help me, I really appreciate it.

2

I don’t know, but you could try asking here

Or you could also check if the hardened version is compatible with your workflows

https://hub.docker.com/hardened-images/catalog/dhi/python

Since that has fewer packages installed by default, it has only 1 medium vulnerability at the moment. Of course if you have to install other packages on top of the base image, that might introduce new vulnerabilities