Vulnerabilities in Ingress-nginx. How can we upgrade to another ingress-nginx image?

HCL Connections Connections Forum
1

Connections Version:
Connections 7
Operating System:
RHEL 8

Problem/Query:
There’s a vulnerability in the default Ingress-nginx image which was fixed in recent versions of Kubernetes => Ingress-nginx CVE-2025-1974: What You Need to Know | Kubernetes

When I look at the description of the cnx-ingress-ingress-nginx-controller, I see as image: registry.k8s.io/ingress-nginx/controller:v1.11.3
so a vulnerable version. Was the Helm chart in HCL’s harbor repo already updated to grab v1.11.5 instead? If not, what are the steps to update the helm chart ourselves? Have people updated their ingress-nginx-controller images?

1 Like
2

Hi Martijn,

You can update directly with helm.

helm upgrade --reuse-values cnx-ingress ingress-nginx/ingress-nginx -n connections

Regards,
Christoph