From 8f85c320afcc4bacffebedfa563bcb1cfaae5251 Mon Sep 17 00:00:00 2001 From: Raj Chaudhuri Date: Tue, 30 Jul 2024 13:03:21 +0530 Subject: [PATCH] Scan results on 2024-07-30 --- reweave/scans/badge.json | 2 +- reweave/scans/report.md | 104 ++++++++++++++++++++++++++++----------- 2 files changed, 77 insertions(+), 29 deletions(-) diff --git a/reweave/scans/badge.json b/reweave/scans/badge.json index 6e40edf5..79efff6d 100644 --- a/reweave/scans/badge.json +++ b/reweave/scans/badge.json @@ -1 +1 @@ -{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "3", "color": "orange"} +{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "18", "color": "orange"} diff --git a/reweave/scans/report.md b/reweave/scans/report.md index a6f12652..8c5989cb 100644 --- a/reweave/scans/report.md +++ b/reweave/scans/report.md @@ -1,8 +1,8 @@ # Vulnerability Report ``` -Report date: 2024-06-19 -Unique vulnerability count: 3 +Report date: 2024-07-30 +Unique vulnerability count: 18 Images version: 2.8.8 ``` @@ -10,52 +10,100 @@ Images version: 2.8.8 ``` Application: grype -Version: 0.79.1 -BuildDate: 2024-06-17T19:33:32Z -GitCommit: 239741f535c59d6e1b9faee61f64ebcf4361d2c5 -GitDescription: v0.79.1 +Version: 0.79.3 +BuildDate: 2024-07-15T12:57:46Z +GitCommit: 45b7236e948ef973a8a6ffbac52dff28be0fd70e +GitDescription: v0.79.3 Platform: linux/amd64 -GoVersion: go1.22.4 +GoVersion: go1.22.5 Compiler: gc -Syft Version: v1.7.0 +Syft Version: v1.9.0 Supported DB Schema: 5 ``` ## Vulnerabilities -### weave-kube: (3) +### weave-kube: (18) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -stdlib go1.21.9 go-module CVE-2024-24790 Critical -stdlib go1.21.9 go-module CVE-2024-24789 Medium -stdlib go1.21.9 go-module CVE-2024-24787 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High +curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown +curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown +libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown +libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown +libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +stdlib go1.21.9 go-module CVE-2024-24790 Critical +stdlib go1.21.9 go-module CVE-2024-24791 High +stdlib go1.21.9 go-module CVE-2024-24789 Medium +stdlib go1.21.9 go-module CVE-2024-24787 Medium ``` -### weave-npc: (3) +### weave-npc: (6) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -stdlib go1.21.9 go-module CVE-2024-24790 Critical -stdlib go1.21.9 go-module CVE-2024-24789 Medium -stdlib go1.21.9 go-module CVE-2024-24787 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +stdlib go1.21.9 go-module CVE-2024-24790 Critical +stdlib go1.21.9 go-module CVE-2024-24791 High +stdlib go1.21.9 go-module CVE-2024-24789 Medium +stdlib go1.21.9 go-module CVE-2024-24787 Medium ``` -### weave: (3) +### weave: (18) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -stdlib go1.21.9 go-module CVE-2024-24790 Critical -stdlib go1.21.9 go-module CVE-2024-24789 Medium -stdlib go1.21.9 go-module CVE-2024-24787 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High +curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown +curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown +libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown +libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown +libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +stdlib go1.21.9 go-module CVE-2024-24790 Critical +stdlib go1.21.9 go-module CVE-2024-24791 High +stdlib go1.21.9 go-module CVE-2024-24789 Medium +stdlib go1.21.9 go-module CVE-2024-24787 Medium ``` -### weaveexec: (3) +### weaveexec: (18) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -stdlib go1.21.9 go-module CVE-2024-24790 Critical -stdlib go1.21.9 go-module CVE-2024-24789 Medium -stdlib go1.21.9 go-module CVE-2024-24787 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High +curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown +curl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown +libcrypto3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6874 Unknown +libcurl 8.7.1-r0 8.9.0-r0 apk CVE-2024-6197 Unknown +libssl3 3.3.1-r0 3.3.1-r1 apk CVE-2024-5535 Critical +stdlib go1.21.9 go-module CVE-2024-24790 Critical +stdlib go1.21.9 go-module CVE-2024-24791 High +stdlib go1.21.9 go-module CVE-2024-24789 Medium +stdlib go1.21.9 go-module CVE-2024-24787 Medium ```