Tianon Gravi

I think https://github.com/docker-library/python/issues/947#issuecomment-3010381261 is still the most reflective of our current state (the build matrix is large, the compilation is _heavy_, and this is essentially asking us to double it...

Yeah, I realized that after re-reading the other thread and implementing the idea. 😞 :heart:

Yeah, I really don't understand how that automatic fallback can work if they're not ABI compatible. 🤔

FWIW, this is exactly the same level of granularity we support for Alpine (3.22, etc are essentially "major releases" of Alpine Linux - we don't tag for the minor releases...

I think we should keep `curl` out of the images -- it's not necessary for Tomcat itself, so it doesn't belong in the images (but we shouldn't go out of...

IMO given that we're still actively maintaining the older PHP version tags, it's trivial for users to get more specific if/when they discover that they have a version constraint they...

I have successfully reproduced, but unfortunately I can't see any way for this to be an issue with the image. There's probably a few interrelated issues here in both Python...

The CVEs in question specify a particular bit of code which has a defect (some of which exhibit as a "vulnerability", in that they're exploitable). The `govulncheck` tool works by...

Agreed, my understanding is that these aliases have been considered "legacy" and secondary for many years now, and that's finally reflected appropriately in the packaging, and it's trivial for downstream...

I'm a little confused here -- what's the use case for `find_library('c')` in the first place? It seems strange to me to be trying to `dlopen` libc itself in this...