You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The base image CVEs are fixed as part of our release process. We are planning for a new release to be made in the coming days, once that takes place the image will be patched.
kustomize v0.30 includes a couple of CVE's from Alpine, CVE-2022-42915, curl, 9.8 and CVE-2022-43680 expat, 7.5
This can be easily cleared up by changing
https://github.com/fluxcd/kustomize-controller/blob/main/Dockerfile#L34
to
FROM alpine:3.16.2
which will pick up the fixes from Alpine.The text was updated successfully, but these errors were encountered: