Alpine base image upgraded to 3.20.3
This commit is contained in:
Raj Chaudhuri committed
1 parent
f32a2a6955
commit
ca2ba767d9
5 files changed
+76
-90
No files matched your search
@@ -2,6 +2,12 @@
|
||||
|
||||
All changes made to the weave net codebase since the fork will be documented in this file.
|
||||
|
||||
## 2.8.10-beta1
|
||||
|
||||
### Changed
|
||||
|
||||
* Changed the Alpine base image in `reweave/Makefile` and `reweave/build/Dockerfile` to `alpine:3.20.3`
|
||||
|
||||
## 2.8.9
|
||||
|
||||
### Changed
|
||||
|
||||
+2
-2
@@ -1,7 +1,7 @@
|
||||
IMAGE_VERSION ?= 2.8.9
|
||||
IMAGE_VERSION ?= 2.8.10-beta1
|
||||
REGISTRY_USER ?= rajchaudhuri
|
||||
|
||||
ALPINE_BASEIMAGE ?= alpine:3.20.2
|
||||
ALPINE_BASEIMAGE ?= alpine:3.20.3
|
||||
|
||||
# Targets
|
||||
.PHONY: build-images
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# syntax=docker/dockerfile:1
|
||||
ARG ALPINE_BASEIMAGE=alpine:3.20.2
|
||||
ARG ALPINE_BASEIMAGE=alpine:3.20.3
|
||||
|
||||
########
|
||||
# Stage 1: go 1.22.2 on debian bullseye
|
||||
|
||||
@@ -1 +1 @@
|
||||
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "22", "color": "orange"}
|
||||
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "16", "color": "orange"}
|
||||
+66
-86
@@ -2,8 +2,8 @@
|
||||
|
||||
```
|
||||
Report date: 2024-10-16
|
||||
Unique vulnerability count: 22
|
||||
Images version: 2.8.9
|
||||
Unique vulnerability count: 16
|
||||
Images version: 2.8.10-beta1
|
||||
```
|
||||
|
||||
## Scanner Details
|
||||
@@ -23,103 +23,83 @@ Supported DB Schema: 5
|
||||
|
||||
## Vulnerabilities
|
||||
|
||||
### weave-kube: (22)
|
||||
### weave-kube: (16)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
### weave-npc: (10)
|
||||
### weave-npc: (8)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
### weave: (22)
|
||||
### weave: (16)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
### weaveexec: (22)
|
||||
### weaveexec: (16)
|
||||
|
||||
```
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium
|
||||
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium
|
||||
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-libs 9.18.27-r0 apk CVE-2024-0760 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-4076 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1975 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-1737 High
|
||||
bind-tools 9.18.27-r0 apk CVE-2024-0760 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24790 Critical
|
||||
stdlib go1.22.2 go-module CVE-2024-34158 High
|
||||
stdlib go1.22.2 go-module CVE-2024-34156 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24791 High
|
||||
stdlib go1.22.2 go-module CVE-2024-24789 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-24787 Medium
|
||||
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
|
||||
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
|
||||
```
|
||||
|
||||
Reference in new issue
Block a user