reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Go version bumped to 1.21

Browse Source
This commit is contained in:
Raj Chaudhuri committed 2024-03-03 22:42:41 +05:30
1 parent 0e7b15b329
commit a9d663438f
8 files changed
+71 -144
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/rajch/weave
go 1.20
go 1.21
require (
github.com/andybalholm/go-bit v1.0.1
reweave/CHANGELOG.md
+7
View File
@@ -6,6 +6,13 @@ All changes made to the weave net codebase during the reweave effort will be doc
### Changed
* Bumped go version in `go.mod` to `1.21`.
* Changed go base image in `reweave/build/Dockerfile` to `golang:1.21.6-bullseye`.
## 2.8.2-beta14 (0e7b15b3)
### Changed
* Vulnerability scanning output changed to a consolidated report
* Documentation changed to reflect new fork status
reweave/Makefile
+2 -2
View File
@@ -1,4 +1,4 @@
IMAGE_VERSION ?= 2.8.2-beta14
IMAGE_VERSION ?= 2.8.2-beta15
REGISTRY_USER ?= rajchaudhuri
ALPINE_BASEIMAGE ?= alpine:3.19.1
@@ -47,7 +47,7 @@ clean-plugin:
tools/clean-plugin.sh
.PHONY: clean
clean: clean-plugin clean-images
clean: clean-images clean-plugin
.PHONY: submodule
submodule: ../tools/.git
reweave/build/Dockerfile
+1 -1
View File
@@ -7,7 +7,7 @@ ARG ALPINE_BASEIMAGE=alpine:3.19.1
# It will be built only once for a given build platform. Subsequent
# stages will start from this and cross-compile for each target
# architecture.
FROM --platform=${BUILDPLATFORM} golang:1.20.2-bullseye AS builderbase
FROM --platform=${BUILDPLATFORM} golang:1.21.6-bullseye AS builderbase
# Support Raspberry Pi 2 and newer
ENV GOARM 7
reweave/scans/badge.json
+1 -1
View File
@@ -1 +1 @@
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "34", "color": "orange"}
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "14", "color": "orange"}
reweave/scans/report.md
+31 -71
View File
@@ -1,7 +1,7 @@
# Vulnerability Report
Report date: 2024-03-03
Unique vulnerability count: 34
Unique vulnerability count: 14
Images version: 2.8.2-beta14
## Scanner Details
@@ -19,76 +19,36 @@ Supported DB Schema: 5
## Vulnerabilities
weave-kube: (34)
weave-kube: (14)
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
libuv 1.47.0-r0 apk CVE-2024-24806 High
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
libuv 1.47.0-r0 apk CVE-2024-24806 High
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
weave-npc: (32)
weave-npc: (12)
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
reweave/scans/weave-kube-list-vulns.txt
+15 -35
View File
@@ -1,35 +1,15 @@
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
libuv 1.47.0-r0 apk CVE-2024-24806 High
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium
libuv 1.47.0-r0 apk CVE-2024-24806 High
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
reweave/scans/weave-npc-list-vulns.txt
+13 -33
View File
@@ -1,33 +1,13 @@
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium