reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Alpine base image upgraded

Browse Source
This commit is contained in:
Raj Chaudhuri committed 2023-07-17 11:06:46 +05:30
1 parent cdf761b8a3
commit 4b47fc607c
6 files changed
+6 -32
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

reweave/Makefile
+2 -2
View File
@@ -1,7 +1,7 @@
IMAGE_VERSION ?= 2.8.2-beta6
IMAGE_VERSION ?= 2.8.2-beta7
REGISTRY_USER ?= weaveworks
ALPINE_BASEIMAGE ?= alpine:3.17.3
ALPINE_BASEIMAGE ?= alpine:3.18.2
# Targets
.PHONY: build
reweave/scans/images-version.txt
+1 -1
View File
@@ -1 +1 @@
Image version: 2.8.2-beta6
Image version: 2.8.2-beta7
reweave/scans/weave-kube-count-vulns.txt
+1 -1
View File
@@ -1 +1 @@
weave-kube CVE Count: 29
weave-kube CVE Count: 7
reweave/scans/weave-kube-list-vulns.txt
-22
View File
@@ -1,14 +1,4 @@
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
bind-libs 9.18.11-r0 apk CVE-2023-2828 High
bind-libs 9.18.11-r0 apk CVE-2023-2829 High
bind-libs 9.18.11-r0 apk CVE-2023-2911 High
bind-tools 9.18.11-r0 apk CVE-2023-2828 High
bind-tools 9.18.11-r0 apk CVE-2023-2829 High
bind-tools 9.18.11-r0 apk CVE-2023-2911 High
curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28319 High
curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28320 Medium
curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28321 Medium
curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28322 Low
github.com/docker/distribution v2.8.1+incompatible 2.8.2-beta.1 go-module GHSA-hqxw-f8mx-cpmw High
github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-232p-vwff-86mp High
github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-33pg-m6jh-5237 Medium
@@ -16,16 +6,4 @@ github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module G
github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-g2j6-57v7-gm8c Medium
github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-m8cg-xc2p-r3fc Low
github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-vpvm-3wq2-2wvm High
libcap2 2.66-r0 2.66-r1 apk CVE-2023-2602 Low
libcap2 2.66-r0 2.66-r1 apk CVE-2023-2603 High
libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium
libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High
libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28319 High
libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28320 Medium
libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28321 Medium
libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28322 Low
libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium
libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High
libxml2 2.10.3-r1 2.10.4-r0 apk CVE-2023-28484 Medium
libxml2 2.10.3-r1 2.10.4-r0 apk CVE-2023-29469 Medium
reweave/scans/weave-npc-count-vulns.txt
+1 -1
View File
@@ -1 +1 @@
weave-npc CVE Count: 4
weave-npc CVE Count: 0
reweave/scans/weave-npc-list-vulns.txt
+1 -5
View File
@@ -1,6 +1,2 @@
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium
libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High
libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium
libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High
No vulnerabilities found