ALAS-2025-862 unable to update libxml2 on node22 lambda image?

[rforster-dev]

Hello,

ECR scanner has flagged https://alas.aws.amazon.com/AL2023/ALAS-2025-862.html within "public.ecr.aws/lambda/nodejs:22"

When running dnf update libxml2 --releasever 2023.6.20250218 it still lists that the version of libxml2 is libxml2-2.10.4-1.amzn2023.0.7.aarch64 and then still gets picked up in the scanner.

Is this correct? Sorry if this is the wrong place!

[alexey-tsvetnov]

@rforster-dev , yeah this is a wrong place for reporting issues in Lambda.
This Github Repo is dedicated to only Amazon Linux.

Sorry that it took a year to respond.