updated chartmuseum image contains security vulnerability(CVE-2022-37434-zlib)
prasoon-pxc opened this issue · comments
Found Zlib security vulnerability on alpine image which is using as a base image in chart-museum image.
Minor fix may be available in alpine:3.13 image
Vulnerability Details --> https://access.redhat.com/security/cve/CVE-2022-37434
Chart-museum Image --> ghcr.io/helm/chartmuseum:v0.15.0
We will update the alphine version until our next release , if you need to use the latest version of alpine , you can use our HEAD version
@scbizu --> Can't we use versioned alpine image instead of latest, because this vulnerability is fix in alpine:3.13 , but if we use latest tag than it will never use 3.13 tag, or maybe I do not know if above vulnerability fix is available in latest image tag of alpine or not.