Skip to content

Upgraded MariaDB image to 11.8 to fix AWS detected vulnerabilities.#321

Merged
pierre merged 1 commit intokillbill:masterfrom
vnandwana:upgrade-mariadb
Mar 19, 2026
Merged

Upgraded MariaDB image to 11.8 to fix AWS detected vulnerabilities.#321
pierre merged 1 commit intokillbill:masterfrom
vnandwana:upgrade-mariadb

Conversation

@vnandwana
Copy link
Contributor

The security vulnerabilities that are being flagged by the AWS team for the ECS product:

Product Title: Kill Bill on AWS - Serverless Multi-Tier on ECS 
Product id: b05ab31f-fe4b-4e13-bac8-224da233057c
Vulnerability:CVE-2023-44487,  CVE-2025-24813,  CVE-2025-31650

Killbill and Kaui images look good.

Trivy scan detected the following vulnerabilities on the mariadb image currently in use:

Report Summary

┌─────────────────────────────┬──────────┬─────────────────┬─────────┐
│           Target            │   Type   │ Vulnerabilities │ Secrets │
├─────────────────────────────┼──────────┼─────────────────┼─────────┤
│ 1af96561207c (ubuntu 22.04) │  ubuntu  │       225       │    -    │
├─────────────────────────────┼──────────┼─────────────────┼─────────┤
│ usr/local/bin/gosu          │ gobinary │       105       │    -    │
└─────────────────────────────┴──────────┴─────────────────┴─────────┘

@vnandwana vnandwana requested review from pierre and sbrossie March 19, 2026 11:49
@@ -1,4 +1,4 @@
FROM mariadb:10.11
FROM mariadb:11.8
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The latest version is 12.2, but not sure if jumping from 10.x to 12.x is safe

@pierre pierre merged commit cbd19f3 into killbill:master Mar 19, 2026
2 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants