Skip to content

STAC-25422 Refresh Contrib StackPacks libgcrypt - #9

Merged
LouisLotter merged 1 commit into
mainfrom
STAC-25422-refresh-contrib-stackpacks-libgcrypt
Jul 27, 2026
Merged

STAC-25422 Refresh Contrib StackPacks libgcrypt#9
LouisLotter merged 1 commit into
mainfrom
STAC-25422-refresh-contrib-stackpacks-libgcrypt

Conversation

@LouisLotter

Copy link
Copy Markdown
Contributor

Summary

  • pin the Contrib StackPacks image base to registry.suse.com/bci/bci-minimal:15.7-26.22
  • keep the OCI base-image metadata aligned with the Dockerfile

Why

The new base contains libgcrypt20-1.11.0-150700.5.10.1, replacing the vulnerable package selected by the moving 15.7 tag in the last published image.

Validation

  • local amd64 image build passed
  • verified fixed libgcrypt package in amd64 and arm64 base variants
  • Trivy: no Medium, High, or Critical findings (DB updated 2026-07-27)
  • Grype: no Medium, High, or Critical findings (DB built 2026-07-27)
  • Zizmor: no findings

Jira: https://stackstate.atlassian.net/browse/STAC-25422

@LouisLotter
LouisLotter merged commit 0569ab4 into main Jul 27, 2026
14 checks passed
@LouisLotter
LouisLotter deleted the STAC-25422-refresh-contrib-stackpacks-libgcrypt branch July 27, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants