Skip to content

[chart/redis-ha][Vulnerability]CVE-2025-15467 in 3.0.8-alpine #392

@giogujabidze

Description

@giogujabidze

Describe the bug
Even the latest chart version 4.35.10 is based on a relatively older version on alpine image 3.0.8 which includes the libssl related vulnerability CVE-2025-15467

To Reproduce
Steps to reproduce the behavior:

  1. Well you can either scan the deployed container with any of the security scanner.
  2. Or you can run the following command docker run --rm public.ecr.aws/docker/library/haproxy:3.0.8-alpine apk info -vv | grep ssl to check the actual versions of libssl libraries and then check the CVE details here

Expected behavior
The container should have this vulnerability fixed

Additional context
There are newer versions of alipine linux, which already have this CVE fixed, for example this one (to stick with the current minor version) public.ecr.aws/docker/library/haproxy:3.0.18-alpine. I have already scanned it and it has 3.5.5-r0 which is fixed version according to alpine webpage

Metadata

Metadata

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions