Skip to content

chore(bucket): bump system/bucket images to current upstream release #2887

Closed
Closed
chore(bucket): bump system/bucket images to current upstream release#2887
Labels
priority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next releasesecuritySecurity-related issues and featuressecurity/fixedFix released

Description

@lexfrei
Aleksei Sviridkin (lexfrei)
opened on Jun 11, 2026

Bump the system/bucket package to the latest upstream release.

The currently pinned images carry outdated packages with published security fixes: libpython3.13-minimal (5), libexpat (3), libgnutls30 (2), libgssapi-krb5-2, sqlite-libs, curl, libgcrypt20, libcap2, nghttp2-libs — 16 known CVEs total.

Routine maintenance bump: verify with helm template / helm lint and a dev-cluster deploy.

Activity

  1. Aleksei Sviridkin (lexfrei)
    added
    securitySecurity-related issues and features
    priority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next release
    on Jun 11, 2026
  2. dosubot
    added
    security/fixedFix released
    on Jun 11, 2026
  3. Aleksei Sviridkin (lexfrei)
    added a commit that references this issue on Jun 23, 2026

    chore(build): refresh first-party Alpine runtime bases to 3.24 (#3009)

    bebf4db

  4. lexfrei commented on Jul 1, 2026

    @lexfrei
    Aleksei Sviridkin (lexfrei)
    on Jul 1, 2026
    ContributorAuthor

    Landed on main via #3009 (alpine3.24) plus digest pin 56108ec; already marked security/fixed. Closing as completed.

  5. Aleksei Sviridkin (lexfrei)
    closed this as completedon Jul 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    priority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next releasesecuritySecurity-related issues and featuressecurity/fixedFix released

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions