Skip to content

BB2-4848: Update Debian:13 python3.13 to version 3.13.5-2+deb13u3#1653

Draft
JamesDemeryNava wants to merge 3 commits into
masterfrom
jamesdemery/bb2-4848-update-dockerfile
Draft

BB2-4848: Update Debian:13 python3.13 to version 3.13.5-2+deb13u3#1653
JamesDemeryNava wants to merge 3 commits into
masterfrom
jamesdemery/bb2-4848-update-dockerfile

Conversation

@JamesDemeryNava

Copy link
Copy Markdown
Contributor

JIRA Ticket:
BB2-4848

What Does This PR Do?

Updates Debian:13 python3.13 to version 3.13.5-2+deb13u3 to address a security vulnerability.

What Should Reviewers Watch For?

If you're reviewing this PR, please check for these things in particular:

Validation

  • Check out the branch
  • Build the docker file from root to ensure it build successfully: docker build -t dockerfile-root .
  • Exec into running container: docker run -it docker.io/library/dockerfile-root:latest /bin/bash
  • Use debian package manager command to look up python3.13 version and ensure it's been updated to 3.13.5-2+deb13u3: dpkg -l | grep python3.13
  • Go through testclient auth flow, make sure that works as expected.

What Security Implications Does This PR Have?

Please indicate if this PR does any of the following:

  • Adds any new software dependencies
  • Modifies any security controls
  • Adds new transmission or storage of data
  • Any other changes that could possibly affect security?
  • Yes, one or more of the above security implications apply. This PR must not be merged without the ISSO or team
    security engineer's approval.

Any Migrations?

  • Yes, there are migrations
    • The migrations should be run PRIOR to the code being deployed
    • The migrations should be run AFTER the code is deployed
    • There is a more complicated migration plan (downtime,
      etc)
  • No migrations

Comment thread Dockerfile Outdated

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wouldn't we want to change the base image instead of adding it as a package here? Changing line 1 from python3.12 to something else? I know that might make it more involved since we'd have to test this other version and make sure it is backwards compatible.

@JamesDemeryNava JamesDemeryNava marked this pull request as draft July 13, 2026 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants