search

mvisonneau / helm-charts

Personal Helm charts repository
Apache License 2.0
65 stars 58 forks source link

gitlab-ci-pipelines-exporter: update redis chart to fix HIGH CVE #80

Closed muellerst-hg closed 1 month ago

muellerst-hg commented 10 months ago

Currently gitlab-ci-pipelines-exporter ships bitname/redis 17.11.3 with redis 7.0.11 This version of redis is affected from two HIGH security vulnerabilities with potential remote code execution.

Please bump the redis subchart at least to 17.17.1 which ships redis 7.0.12

https://github.com/redis/redis/security/advisories/GHSA-p8x2-9v9q-c838 https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3

xinity commented 1 month ago

this issue can be closed i think, the chart as been updated to version: 18.17.0 @muellerst-hg