Comments (4)
hughcapet
commented on June 14, 2024
4
releases in Spilo make no sense now as nothing is pinned, thus we can not preliminarily test the exact same image state internally. That is why we build ghcr images from time to time but they are not called "release".
But you can always build your image from maser branch using the Dockerfile
from spilo.
Reinhard-F
commented on June 14, 2024
2
I think Spilo version 3.0-p1 is affected.
This version was built on 10.03.2023.
At that time, version 14.7 of postgresql was available for major version 14. See also: https://www.postgresql.org/docs/release/14.7/
If you determine the version in the Spilo container (select version();), this version is displayed there.
A new Spilo image is required to fix this CVE.
from spilo.
hughcapet
commented on June 14, 2024
We are not publishing releases now. Any new image you build from master branch now will include the fix
from spilo.
teimyBr
commented on June 14, 2024
is is not possible that zalando is building a new release ?
from spilo.
Related Issues (20)
- Add pgx_ulid extension HOT 1
- pg_cron fails with returned message `connection failed` HOT 2
- missing github release for v3.1-p1 HOT 1
- The vector extension is unavailable in spilo-15:2.1-p9 HOT 2
- AWS IMDSv2 Support for environment detection
- Update spilo image to resolve some vulnerabilities HOT 4
- Could not start the server while major in-place upgrade HOT 1
- Question on major upgrade procedure HOT 2
- json log option HOT 5
- Image update against https://nvd.nist.gov/vuln/detail/CVE-2024-0985 HOT 1
- Proxy is broken during cloning
- Can't build image with PG16 and TimescaleDB HOT 2
- Support for Timescale pg_influx HOT 1
- WALG_AZ_PREFIX variable is mandatory in Azure backup configuration HOT 1
- Security Vulnerabilities: Both 15 and 16 Images have critical and high Vulnerabilities HOT 1
- Security Vulnerabilities Found HOT 3
- Bump wal-g to v3
- Adding/Installing PGMQ extension
- Spilo 14 docker images HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spilo.