Request fix of CVE-2024-2961

[sync-by-unito]

Requested fix for 13 critical CVEs, as the result of a recent security scan. Please notify customer of the fix via support team.

|----|----|
|k8ssandracassoperator_v1.17.2|CVE20242961|

┆Issue is synchronized with this Jira Vulnerability by Unito
┆Issue Number: K8OP-293

[sync-by-unito]

➤ Tiago Alves commented:

Erik Merkle could you move this to where k8ssandra-cass-operator tracks these issues?

[sync-by-unito]

➤ Tiago Alves commented:

Erik Merkle no need, I’ve done it already.

[sync-by-unito]

➤ Michael Burman commented:

Closing as 1.17.2 is not relevant version.

[adejanovski]

@burmanm, is this CVE fixed in more recent versions?

[burmanm]

It's a base layer vuln.

[adejanovski]

It's a base layer vuln.

And our base layer was upgraded since then?

[burmanm]

At least ubi images are.

[burmanm]

And so has gcr.io/distroless/static