reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Go version bumped to 1.21

Browse Source
This commit is contained in:
Raj Chaudhuri committed 2024-03-03 22:42:41 +05:30
1 parent 0e7b15b329
commit a9d663438f
8 files changed
+71 -144
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

go.mod
+1 -1
View File
@@ -1,6 +1,6 @@
module github.com/rajch/weave module github.com/rajch/weave
go 1.20 go 1.21
require ( require (
github.com/andybalholm/go-bit v1.0.1 github.com/andybalholm/go-bit v1.0.1
reweave/CHANGELOG.md
+7
View File
@@ -6,6 +6,13 @@ All changes made to the weave net codebase during the reweave effort will be doc
### Changed ### Changed
* Bumped go version in `go.mod` to `1.21`.
* Changed go base image in `reweave/build/Dockerfile` to `golang:1.21.6-bullseye`.
## 2.8.2-beta14 (0e7b15b3)
### Changed
* Vulnerability scanning output changed to a consolidated report * Vulnerability scanning output changed to a consolidated report
* Documentation changed to reflect new fork status * Documentation changed to reflect new fork status
reweave/Makefile
+2 -2
View File
@@ -1,4 +1,4 @@
IMAGE_VERSION ?= 2.8.2-beta14 IMAGE_VERSION ?= 2.8.2-beta15
REGISTRY_USER ?= rajchaudhuri REGISTRY_USER ?= rajchaudhuri
ALPINE_BASEIMAGE ?= alpine:3.19.1 ALPINE_BASEIMAGE ?= alpine:3.19.1
@@ -47,7 +47,7 @@ clean-plugin:
tools/clean-plugin.sh tools/clean-plugin.sh
.PHONY: clean .PHONY: clean
clean: clean-plugin clean-images clean: clean-images clean-plugin
.PHONY: submodule .PHONY: submodule
submodule: ../tools/.git submodule: ../tools/.git
reweave/build/Dockerfile
+1 -1
View File
@@ -7,7 +7,7 @@ ARG ALPINE_BASEIMAGE=alpine:3.19.1
# It will be built only once for a given build platform. Subsequent # It will be built only once for a given build platform. Subsequent
# stages will start from this and cross-compile for each target # stages will start from this and cross-compile for each target
# architecture. # architecture.
FROM --platform=${BUILDPLATFORM} golang:1.20.2-bullseye AS builderbase FROM --platform=${BUILDPLATFORM} golang:1.21.6-bullseye AS builderbase
# Support Raspberry Pi 2 and newer # Support Raspberry Pi 2 and newer
ENV GOARM 7 ENV GOARM 7
reweave/scans/badge.json
+1 -1
View File
@@ -1 +1 @@
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "34", "color": "orange"} {"schemaVersion": 1, "label": "Vulnerabilty count", "message": "14", "color": "orange"}
reweave/scans/report.md
+31 -71
View File
@@ -1,7 +1,7 @@
# Vulnerability Report # Vulnerability Report
Report date: 2024-03-03 Report date: 2024-03-03
Unique vulnerability count: 34 Unique vulnerability count: 14
Images version: 2.8.2-beta14 Images version: 2.8.2-beta14
## Scanner Details ## Scanner Details
@@ -19,76 +19,36 @@ Supported DB Schema: 5
## Vulnerabilities ## Vulnerabilities
weave-kube: (34) weave-kube: (14)
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium curl 8.5.0-r0 apk CVE-2024-0853 Medium
libuv 1.47.0-r0 apk CVE-2024-24806 High libuv 1.47.0-r0 apk CVE-2024-24806 High
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
weave-npc: (32) weave-npc: (12)
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
reweave/scans/weave-kube-list-vulns.txt
+15 -35
View File
@@ -1,35 +1,15 @@
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
curl 8.5.0-r0 apk CVE-2024-0853 Medium curl 8.5.0-r0 apk CVE-2024-0853 Medium
libuv 1.47.0-r0 apk CVE-2024-24806 High libuv 1.47.0-r0 apk CVE-2024-24806 High
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium
reweave/scans/weave-npc-list-vulns.txt
+13 -33
View File
@@ -1,33 +1,13 @@
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium busybox 1.36.1-r15 apk CVE-2023-42365 Medium
busybox 1.36.1-r15 apk CVE-2023-42364 Medium busybox 1.36.1-r15 apk CVE-2023-42364 Medium
busybox 1.36.1-r15 apk CVE-2023-42363 Medium busybox 1.36.1-r15 apk CVE-2023-42363 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
stdlib go1.20.2 go-module CVE-2023-29405 Critical
stdlib go1.20.2 go-module CVE-2023-29404 Critical
stdlib go1.20.2 go-module CVE-2023-29402 Critical
stdlib go1.20.2 go-module CVE-2023-24540 Critical
stdlib go1.20.2 go-module CVE-2023-24538 Critical
stdlib go1.20.2 go-module CVE-2023-45285 High
stdlib go1.20.2 go-module CVE-2023-44487 High
stdlib go1.20.2 go-module CVE-2023-39325 High
stdlib go1.20.2 go-module CVE-2023-39323 High
stdlib go1.20.2 go-module CVE-2023-29403 High
stdlib go1.20.2 go-module CVE-2023-29400 High
stdlib go1.20.2 go-module CVE-2023-24539 High
stdlib go1.20.2 go-module CVE-2023-24537 High
stdlib go1.20.2 go-module CVE-2023-24536 High
stdlib go1.20.2 go-module CVE-2023-24534 High
stdlib go1.20.2 go-module CVE-2023-39326 Medium
stdlib go1.20.2 go-module CVE-2023-39319 Medium
stdlib go1.20.2 go-module CVE-2023-39318 Medium
stdlib go1.20.2 go-module CVE-2023-29409 Medium
stdlib go1.20.2 go-module CVE-2023-29406 Medium