From ca2ba767d99d468ec20648cba45da96d8147d716 Mon Sep 17 00:00:00 2001 From: Raj Chaudhuri Date: Thu, 17 Oct 2024 12:16:12 +0530 Subject: [PATCH] Alpine base image upgraded to 3.20.3 --- reweave/CHANGELOG.md | 6 ++ reweave/Makefile | 4 +- reweave/build/Dockerfile | 2 +- reweave/scans/badge.json | 2 +- reweave/scans/report.md | 152 +++++++++++++++++---------------------- 5 files changed, 76 insertions(+), 90 deletions(-) diff --git a/reweave/CHANGELOG.md b/reweave/CHANGELOG.md index 77065127..66c7f5c3 100644 --- a/reweave/CHANGELOG.md +++ b/reweave/CHANGELOG.md @@ -2,6 +2,12 @@ All changes made to the weave net codebase since the fork will be documented in this file. +## 2.8.10-beta1 + +### Changed + +* Changed the Alpine base image in `reweave/Makefile` and `reweave/build/Dockerfile` to `alpine:3.20.3` + ## 2.8.9 ### Changed diff --git a/reweave/Makefile b/reweave/Makefile index 3fbcf554..64714f7c 100644 --- a/reweave/Makefile +++ b/reweave/Makefile @@ -1,7 +1,7 @@ -IMAGE_VERSION ?= 2.8.9 +IMAGE_VERSION ?= 2.8.10-beta1 REGISTRY_USER ?= rajchaudhuri -ALPINE_BASEIMAGE ?= alpine:3.20.2 +ALPINE_BASEIMAGE ?= alpine:3.20.3 # Targets .PHONY: build-images diff --git a/reweave/build/Dockerfile b/reweave/build/Dockerfile index 51fa36b1..55ec93fb 100644 --- a/reweave/build/Dockerfile +++ b/reweave/build/Dockerfile @@ -1,5 +1,5 @@ # syntax=docker/dockerfile:1 -ARG ALPINE_BASEIMAGE=alpine:3.20.2 +ARG ALPINE_BASEIMAGE=alpine:3.20.3 ######## # Stage 1: go 1.22.2 on debian bullseye diff --git a/reweave/scans/badge.json b/reweave/scans/badge.json index 3e1c0d85..0df02ea7 100644 --- a/reweave/scans/badge.json +++ b/reweave/scans/badge.json @@ -1 +1 @@ -{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "22", "color": "orange"} +{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "16", "color": "orange"} diff --git a/reweave/scans/report.md b/reweave/scans/report.md index efe72f1c..58be7f37 100644 --- a/reweave/scans/report.md +++ b/reweave/scans/report.md @@ -2,8 +2,8 @@ ``` Report date: 2024-10-16 -Unique vulnerability count: 22 -Images version: 2.8.9 +Unique vulnerability count: 16 +Images version: 2.8.10-beta1 ``` ## Scanner Details @@ -23,103 +23,83 @@ Supported DB Schema: 5 ## Vulnerabilities -### weave-kube: (22) +### weave-kube: (16) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.27-r0 apk CVE-2024-4076 High -bind-libs 9.18.27-r0 apk CVE-2024-1975 High -bind-libs 9.18.27-r0 apk CVE-2024-1737 High -bind-libs 9.18.27-r0 apk CVE-2024-0760 High -bind-tools 9.18.27-r0 apk CVE-2024-4076 High -bind-tools 9.18.27-r0 apk CVE-2024-1975 High -bind-tools 9.18.27-r0 apk CVE-2024-1737 High -bind-tools 9.18.27-r0 apk CVE-2024-0760 High -curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium -curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium -libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium -libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium -libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -stdlib go1.22.2 go-module CVE-2024-24790 Critical -stdlib go1.22.2 go-module CVE-2024-34158 High -stdlib go1.22.2 go-module CVE-2024-34156 High -stdlib go1.22.2 go-module CVE-2024-24791 High -stdlib go1.22.2 go-module CVE-2024-24789 Medium -stdlib go1.22.2 go-module CVE-2024-24787 Medium -stdlib go1.22.2 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High +stdlib go1.22.2 go-module CVE-2024-24790 Critical +stdlib go1.22.2 go-module CVE-2024-34158 High +stdlib go1.22.2 go-module CVE-2024-34156 High +stdlib go1.22.2 go-module CVE-2024-24791 High +stdlib go1.22.2 go-module CVE-2024-24789 Medium +stdlib go1.22.2 go-module CVE-2024-24787 Medium +stdlib go1.22.2 go-module CVE-2024-34155 Unknown +stdlib go1.22.2 go-module CVE-2024-24788 Unknown ``` -### weave-npc: (10) +### weave-npc: (8) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -stdlib go1.22.2 go-module CVE-2024-24790 Critical -stdlib go1.22.2 go-module CVE-2024-34158 High -stdlib go1.22.2 go-module CVE-2024-34156 High -stdlib go1.22.2 go-module CVE-2024-24791 High -stdlib go1.22.2 go-module CVE-2024-24789 Medium -stdlib go1.22.2 go-module CVE-2024-24787 Medium -stdlib go1.22.2 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +stdlib go1.22.2 go-module CVE-2024-24790 Critical +stdlib go1.22.2 go-module CVE-2024-34158 High +stdlib go1.22.2 go-module CVE-2024-34156 High +stdlib go1.22.2 go-module CVE-2024-24791 High +stdlib go1.22.2 go-module CVE-2024-24789 Medium +stdlib go1.22.2 go-module CVE-2024-24787 Medium +stdlib go1.22.2 go-module CVE-2024-34155 Unknown +stdlib go1.22.2 go-module CVE-2024-24788 Unknown ``` -### weave: (22) +### weave: (16) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.27-r0 apk CVE-2024-4076 High -bind-libs 9.18.27-r0 apk CVE-2024-1975 High -bind-libs 9.18.27-r0 apk CVE-2024-1737 High -bind-libs 9.18.27-r0 apk CVE-2024-0760 High -bind-tools 9.18.27-r0 apk CVE-2024-4076 High -bind-tools 9.18.27-r0 apk CVE-2024-1975 High -bind-tools 9.18.27-r0 apk CVE-2024-1737 High -bind-tools 9.18.27-r0 apk CVE-2024-0760 High -curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium -curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium -libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium -libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium -libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -stdlib go1.22.2 go-module CVE-2024-24790 Critical -stdlib go1.22.2 go-module CVE-2024-34158 High -stdlib go1.22.2 go-module CVE-2024-34156 High -stdlib go1.22.2 go-module CVE-2024-24791 High -stdlib go1.22.2 go-module CVE-2024-24789 Medium -stdlib go1.22.2 go-module CVE-2024-24787 Medium -stdlib go1.22.2 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High +stdlib go1.22.2 go-module CVE-2024-24790 Critical +stdlib go1.22.2 go-module CVE-2024-34158 High +stdlib go1.22.2 go-module CVE-2024-34156 High +stdlib go1.22.2 go-module CVE-2024-24791 High +stdlib go1.22.2 go-module CVE-2024-24789 Medium +stdlib go1.22.2 go-module CVE-2024-24787 Medium +stdlib go1.22.2 go-module CVE-2024-34155 Unknown +stdlib go1.22.2 go-module CVE-2024-24788 Unknown ``` -### weaveexec: (22) +### weaveexec: (16) ``` -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -bind-libs 9.18.27-r0 apk CVE-2024-4076 High -bind-libs 9.18.27-r0 apk CVE-2024-1975 High -bind-libs 9.18.27-r0 apk CVE-2024-1737 High -bind-libs 9.18.27-r0 apk CVE-2024-0760 High -bind-tools 9.18.27-r0 apk CVE-2024-4076 High -bind-tools 9.18.27-r0 apk CVE-2024-1975 High -bind-tools 9.18.27-r0 apk CVE-2024-1737 High -bind-tools 9.18.27-r0 apk CVE-2024-0760 High -curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium -curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium -libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium -libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium -libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High -stdlib go1.22.2 go-module CVE-2024-24790 Critical -stdlib go1.22.2 go-module CVE-2024-34158 High -stdlib go1.22.2 go-module CVE-2024-34156 High -stdlib go1.22.2 go-module CVE-2024-24791 High -stdlib go1.22.2 go-module CVE-2024-24789 Medium -stdlib go1.22.2 go-module CVE-2024-24787 Medium -stdlib go1.22.2 go-module CVE-2024-34155 Unknown -stdlib go1.22.2 go-module CVE-2024-24788 Unknown +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.27-r0 apk CVE-2024-4076 High +bind-libs 9.18.27-r0 apk CVE-2024-1975 High +bind-libs 9.18.27-r0 apk CVE-2024-1737 High +bind-libs 9.18.27-r0 apk CVE-2024-0760 High +bind-tools 9.18.27-r0 apk CVE-2024-4076 High +bind-tools 9.18.27-r0 apk CVE-2024-1975 High +bind-tools 9.18.27-r0 apk CVE-2024-1737 High +bind-tools 9.18.27-r0 apk CVE-2024-0760 High +stdlib go1.22.2 go-module CVE-2024-24790 Critical +stdlib go1.22.2 go-module CVE-2024-34158 High +stdlib go1.22.2 go-module CVE-2024-34156 High +stdlib go1.22.2 go-module CVE-2024-24791 High +stdlib go1.22.2 go-module CVE-2024-24789 Medium +stdlib go1.22.2 go-module CVE-2024-24787 Medium +stdlib go1.22.2 go-module CVE-2024-34155 Unknown +stdlib go1.22.2 go-module CVE-2024-24788 Unknown ```