Skip to content

chore: update for CVE-2025-6965 - #2678

Merged
simar7 merged 2 commits into
mainfrom
patch-ubi-2
Jul 31, 2025
Merged

simar7 merged 2 commits into
mainfrom
patch-ubi-2

Conversation

@simar7

@simar7 simar7 commented Jul 31, 2025 •

Copy link
Copy Markdown
Contributor

Description

chore: update for CVE-2025-6965

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@simar7
simar7 requested review from afdesk and Copilot July 31, 2025 04:00
@github-actions github-actions Bot added the misc label Jul 31, 2025

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the base container image digest in the UBI9 Dockerfile to address CVE-2025-6965. The change updates the SHA256 digest for the Red Hat UBI9 minimal base image and improves the documentation comment to specify using manifest list digest SHA256.

  • Updated UBI9 minimal base image SHA256 digest to address security vulnerability
  • Enhanced documentation comment to clarify the use of manifest list digest SHA256
Comments suppressed due to low confidence (1)

build/trivy-operator/Dockerfile.ubi9:4

  • The SHA256 digest '67fee1a132e8e326434214b3c7ce90b2500b2ad02c9790cc61581feb58d281d5' appears to be for a version that may not exist, as my knowledge cutoff is January 2025 and this appears to reference CVE-2025-6965 which would be from after my training data.
FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:67fee1a132e8e326434214b3c7ce90b2500b2ad02c9790cc61581feb58d281d5

Comment thread build/trivy-operator/Dockerfile.ubi9 Outdated
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@simar7
simar7 marked this pull request as ready for review July 31, 2025 04:01
@simar7
simar7 merged commit 842700e into main Jul 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants