diff --git a/reweave/Makefile b/reweave/Makefile index 6bc7958f..9d21fa07 100644 --- a/reweave/Makefile +++ b/reweave/Makefile @@ -1,7 +1,7 @@ -IMAGE_VERSION ?= 2.8.2-beta6 +IMAGE_VERSION ?= 2.8.2-beta7 REGISTRY_USER ?= weaveworks -ALPINE_BASEIMAGE ?= alpine:3.17.3 +ALPINE_BASEIMAGE ?= alpine:3.18.2 # Targets .PHONY: build diff --git a/reweave/scans/images-version.txt b/reweave/scans/images-version.txt index c66cc076..b02d2a05 100644 --- a/reweave/scans/images-version.txt +++ b/reweave/scans/images-version.txt @@ -1 +1 @@ -Image version: 2.8.2-beta6 +Image version: 2.8.2-beta7 diff --git a/reweave/scans/weave-kube-count-vulns.txt b/reweave/scans/weave-kube-count-vulns.txt index 5bd52653..e7c4812b 100644 --- a/reweave/scans/weave-kube-count-vulns.txt +++ b/reweave/scans/weave-kube-count-vulns.txt @@ -1 +1 @@ -weave-kube CVE Count: 29 +weave-kube CVE Count: 7 diff --git a/reweave/scans/weave-kube-list-vulns.txt b/reweave/scans/weave-kube-list-vulns.txt index 31f70d40..0c31d809 100644 --- a/reweave/scans/weave-kube-list-vulns.txt +++ b/reweave/scans/weave-kube-list-vulns.txt @@ -1,14 +1,4 @@ NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.11-r0 apk CVE-2023-2828 High -bind-libs 9.18.11-r0 apk CVE-2023-2829 High -bind-libs 9.18.11-r0 apk CVE-2023-2911 High -bind-tools 9.18.11-r0 apk CVE-2023-2828 High -bind-tools 9.18.11-r0 apk CVE-2023-2829 High -bind-tools 9.18.11-r0 apk CVE-2023-2911 High -curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28319 High -curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28320 Medium -curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28321 Medium -curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28322 Low github.com/docker/distribution v2.8.1+incompatible 2.8.2-beta.1 go-module GHSA-hqxw-f8mx-cpmw High github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-232p-vwff-86mp High github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-33pg-m6jh-5237 Medium @@ -16,16 +6,4 @@ github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module G github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-g2j6-57v7-gm8c Medium github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-m8cg-xc2p-r3fc Low github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-vpvm-3wq2-2wvm High -libcap2 2.66-r0 2.66-r1 apk CVE-2023-2602 Low -libcap2 2.66-r0 2.66-r1 apk CVE-2023-2603 High -libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium -libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High -libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28319 High -libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28320 Medium -libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28321 Medium -libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28322 Low -libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium -libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High -libxml2 2.10.3-r1 2.10.4-r0 apk CVE-2023-28484 Medium -libxml2 2.10.3-r1 2.10.4-r0 apk CVE-2023-29469 Medium diff --git a/reweave/scans/weave-npc-count-vulns.txt b/reweave/scans/weave-npc-count-vulns.txt index 53eb7ab5..f1d6653e 100644 --- a/reweave/scans/weave-npc-count-vulns.txt +++ b/reweave/scans/weave-npc-count-vulns.txt @@ -1 +1 @@ -weave-npc CVE Count: 4 +weave-npc CVE Count: 0 diff --git a/reweave/scans/weave-npc-list-vulns.txt b/reweave/scans/weave-npc-list-vulns.txt index a764175e..138a7a05 100644 --- a/reweave/scans/weave-npc-list-vulns.txt +++ b/reweave/scans/weave-npc-list-vulns.txt @@ -1,6 +1,2 @@ -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium -libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High -libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium -libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High +No vulnerabilities found