base Vulnerability - CVE-2023-4911

[ns-chsu]

• I have read the SECURITY.md
• I understand that this repo tracks debian package releases and cannot fix debian CVEs on its own
• this CVE shows a fix is available in the appropriate debian version (buster, bullseye) and channel (main, security) and it has been more than 48 hours.

Please let me know the debian image to use which has the fix for the below CVE's
Image with base Vulnerability - gcr.io/distroless/base-debian11:nonroot
Image with base Vulnerability - gcr.io/distroless/base-debian12:nonroot
https://security-tracker.debian.org/tracker/CVE-2023-4911

[holistic-developer]

This will be fixed with with PR #1419

[sayeedhussain]

@holistic-developer Do you happen to know when this will be available here https://console.cloud.google.com/gcr/images/distroless/global/nodejs16-debian11

[loosebazooka]

node16 is deprecated, use 18 or 20