diff --git a/go.mod b/go.mod index b95f481b..87df1d24 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/rajch/weave -go 1.21 +go 1.23.1 require ( github.com/andybalholm/go-bit v1.0.1 diff --git a/reweave/CHANGELOG.md b/reweave/CHANGELOG.md index 66c7f5c3..de7b5299 100644 --- a/reweave/CHANGELOG.md +++ b/reweave/CHANGELOG.md @@ -2,6 +2,14 @@ All changes made to the weave net codebase since the fork will be documented in this file. +## 2.8.10-beta2 + +### Changed + +* Changed go version in `go.mod` to 1.23.1 +* Changed go base image in `reweave/build/Dockerfile` to `golang:1.23.1-bullseye`. + + ## 2.8.10-beta1 ### Changed diff --git a/reweave/Makefile b/reweave/Makefile index 64714f7c..4a5f8a33 100644 --- a/reweave/Makefile +++ b/reweave/Makefile @@ -1,4 +1,4 @@ -IMAGE_VERSION ?= 2.8.10-beta1 +IMAGE_VERSION ?= 2.8.10-beta2 REGISTRY_USER ?= rajchaudhuri ALPINE_BASEIMAGE ?= alpine:3.20.3 diff --git a/reweave/build/Dockerfile b/reweave/build/Dockerfile index 55ec93fb..c930b456 100644 --- a/reweave/build/Dockerfile +++ b/reweave/build/Dockerfile @@ -2,12 +2,12 @@ ARG ALPINE_BASEIMAGE=alpine:3.20.3 ######## -# Stage 1: go 1.22.2 on debian bullseye +# Stage 1: go 1.23.1 on debian bullseye # This installs cross-compilation tools for supported architectures. # It will be built only once for a given build platform. Subsequent # stages will start from this and cross-compile for each target # architecture. -FROM --platform=${BUILDPLATFORM} golang:1.22.2-bullseye AS builderbase +FROM --platform=${BUILDPLATFORM} golang:1.23.1-bullseye AS builderbase # Support Raspberry Pi 2 and newer ENV GOARM 7 diff --git a/reweave/scans/badge.json b/reweave/scans/badge.json index 0df02ea7..838490dd 100644 --- a/reweave/scans/badge.json +++ b/reweave/scans/badge.json @@ -1 +1 @@ -{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "16", "color": "orange"} +{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "8", "color": "orange"} diff --git a/reweave/scans/report.md b/reweave/scans/report.md index 6296fbf5..f11d04e4 100644 --- a/reweave/scans/report.md +++ b/reweave/scans/report.md @@ -2,8 +2,8 @@ ``` Report date: 2024-10-17 -Unique vulnerability count: 16 -Images version: 2.8.10-beta1 +Unique vulnerability count: 8 +Images version: 2.8.10-beta2 ``` ## Scanner Details @@ -23,83 +23,51 @@ Supported DB Schema: 5 ## Vulnerabilities -### weave-kube: (16) +### weave-kube: (8) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.27-r0 apk CVE-2024-4076 High -bind-libs 9.18.27-r0 apk CVE-2024-1975 High -bind-libs 9.18.27-r0 apk CVE-2024-1737 High -bind-libs 9.18.27-r0 apk CVE-2024-0760 High -bind-tools 9.18.27-r0 apk CVE-2024-4076 High -bind-tools 9.18.27-r0 apk CVE-2024-1975 High -bind-tools 9.18.27-r0 apk CVE-2024-1737 High -bind-tools 9.18.27-r0 apk CVE-2024-0760 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24790 Critical -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34158 High -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34156 High -stdlib go1.22.2 1.21.12, 1.22.5 go-module CVE-2024-24791 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24789 Medium -stdlib go1.22.2 1.21.10, 1.22.3 go-module CVE-2024-24787 Medium -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 1.22.3 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High ``` -### weave-npc: (8) +### weave-npc: (0) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24790 Critical -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34158 High -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34156 High -stdlib go1.22.2 1.21.12, 1.22.5 go-module CVE-2024-24791 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24789 Medium -stdlib go1.22.2 1.21.10, 1.22.3 go-module CVE-2024-24787 Medium -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 1.22.3 go-module CVE-2024-24788 Unknown +No vulnerabilities found ``` -### weave: (16) +### weave: (8) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.27-r0 apk CVE-2024-4076 High -bind-libs 9.18.27-r0 apk CVE-2024-1975 High -bind-libs 9.18.27-r0 apk CVE-2024-1737 High -bind-libs 9.18.27-r0 apk CVE-2024-0760 High -bind-tools 9.18.27-r0 apk CVE-2024-4076 High -bind-tools 9.18.27-r0 apk CVE-2024-1975 High -bind-tools 9.18.27-r0 apk CVE-2024-1737 High -bind-tools 9.18.27-r0 apk CVE-2024-0760 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24790 Critical -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34158 High -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34156 High -stdlib go1.22.2 1.21.12, 1.22.5 go-module CVE-2024-24791 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24789 Medium -stdlib go1.22.2 1.21.10, 1.22.3 go-module CVE-2024-24787 Medium -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 1.22.3 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High ``` -### weaveexec: (16) +### weaveexec: (8) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.27-r0 apk CVE-2024-4076 High -bind-libs 9.18.27-r0 apk CVE-2024-1975 High -bind-libs 9.18.27-r0 apk CVE-2024-1737 High -bind-libs 9.18.27-r0 apk CVE-2024-0760 High -bind-tools 9.18.27-r0 apk CVE-2024-4076 High -bind-tools 9.18.27-r0 apk CVE-2024-1975 High -bind-tools 9.18.27-r0 apk CVE-2024-1737 High -bind-tools 9.18.27-r0 apk CVE-2024-0760 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24790 Critical -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34158 High -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34156 High -stdlib go1.22.2 1.21.12, 1.22.5 go-module CVE-2024-24791 High -stdlib go1.22.2 1.21.11, 1.22.4 go-module CVE-2024-24789 Medium -stdlib go1.22.2 1.21.10, 1.22.3 go-module CVE-2024-24787 Medium -stdlib go1.22.2 1.22.7, 1.23.1 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 1.22.3 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High ```