CVE-2022-1552 - Spilo Image /w at least PostgreSQL 14.3

[mluett]

• Which image of the operator are you using? registry.opensource.zalan.do/acid/postgres-operator:v1.8.1
• Where do you run it - cloud or metal? Kubernetes or OpenShift? On-Prem Rancher Kubernetes
• Are you running Postgres Operator in production? yes
• Type of issue? Question

Hi, there is a security bug in some minor PostgreSQL Versions, see: CVE-2022-1552 (https://www.postgresql.org/support/security/CVE-2022-1552/)

Are you guys about to update the latest spilo image (spilo-14:2.1-p5) to latest PostgreSQL Version 14.3 which is declared as secure/fixed by this vulnerability? Spilo 2.1-p5 is running on PostgreSQL 14.2

[FxKu]

As of today, the new operator release uses the latest Spilo version as default which incl. Pg 14.4. In general, you can always build your own Spilo image from that repo and use it in the operator configuration.