8000 fix: upgrade pgbouncer alpine base image to address CVE-2025-1094 by Dashing-Nelson · Pull Request #926 · airflow-helm/charts · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

fix: upgrade pgbouncer alpine base image to address CVE-2025-1094 #926

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

Dashing-Nelson
Copy link
@Dashing-Nelson Dashing-Nelson commented Jun 11, 2025

What issues does your PR fix?

What does your PR do?

This PR upgrades the PGBouncer Alpine base image from 3.19 to 3.20 to address CVE-2025-1094 security vulnerability. The changes include:

  • Updated Dockerfile to use Alpine 3.20 in both builder and runtime stages
  • Incremented patch version from 1.22.1 to 1.22.1-patch.1
  • Added changelog entry documenting the security fix
  • Verified the updated image builds successfully

Checklist

For all Pull Requests

  • Commits are signed off
  • Commits have semantic messages
  • Documentation updated (CHANGELOG.md)
  • Passes ct linting

For releasing ONLY

  • Chart.yaml version bumped (VERSION file updated)
  • CHANGELOG.md updated

Signed-off-by: Nelson Alfonso <45660392+Dashing-Nelson@users.noreply.github.com>
Signed-off-by: Nelson Alfonso <45660392+Dashing-Nelson@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

update PGBouncer image with latest alpine base image
1 participant
0