Skip to content

CVE-2024-56171 on pgbouncer image #2974

@chobostar

Description

@chobostar

Please, answer some short questions which should help us to understand your problem / question better?

  • Which image of the operator are you using? e.g. ghcr.io/zalando/postgres-operator:v1.14.0
  • Where do you run it - cloud or metal? Kubernetes or OpenShift? Bare Metal K8s
  • Are you running Postgres Operator in production? yes
  • Type of issue? CVE

image: registry.opensource.zalan.do/acid/pgbouncer:master-32

│ libxml2             │ CVE-2024-56171 │ CRITICAL │        │ 2.11.6-r0         │ 2.11.8-r1     │ libxml2: Use-After-Free in libxml2                           │
│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56171

Could you please update the image ?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions