reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Alpine base image upgraded to 3.20.3

Browse Source
This commit is contained in:
Raj Chaudhuri committed 2024-10-17 12:16:12 +05:30
1 parent f32a2a6955
commit ca2ba767d9
5 files changed
+76 -90
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

reweave/CHANGELOG.md
+6
View File
@@ -2,6 +2,12 @@
All changes made to the weave net codebase since the fork will be documented in this file. All changes made to the weave net codebase since the fork will be documented in this file.
## 2.8.10-beta1
### Changed
* Changed the Alpine base image in `reweave/Makefile` and `reweave/build/Dockerfile` to `alpine:3.20.3`
## 2.8.9 ## 2.8.9
### Changed ### Changed
reweave/Makefile
+2 -2
View File
@@ -1,7 +1,7 @@
IMAGE_VERSION ?= 2.8.9 IMAGE_VERSION ?= 2.8.10-beta1
REGISTRY_USER ?= rajchaudhuri REGISTRY_USER ?= rajchaudhuri
ALPINE_BASEIMAGE ?= alpine:3.20.2 ALPINE_BASEIMAGE ?= alpine:3.20.3
# Targets # Targets
.PHONY: build-images .PHONY: build-images
reweave/build/Dockerfile
+1 -1
View File
@@ -1,5 +1,5 @@
# syntax=docker/dockerfile:1 # syntax=docker/dockerfile:1
ARG ALPINE_BASEIMAGE=alpine:3.20.2 ARG ALPINE_BASEIMAGE=alpine:3.20.3
######## ########
# Stage 1: go 1.22.2 on debian bullseye # Stage 1: go 1.22.2 on debian bullseye
reweave/scans/badge.json
+1 -1
View File
@@ -1 +1 @@
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "22", "color": "orange"} {"schemaVersion": 1, "label": "Vulnerabilty count", "message": "16", "color": "orange"}
reweave/scans/report.md
+66 -86
View File
@@ -2,8 +2,8 @@
``` ```
Report date: 2024-10-16 Report date: 2024-10-16
Unique vulnerability count: 22 Unique vulnerability count: 16
Images version: 2.8.9 Images version: 2.8.10-beta1
``` ```
## Scanner Details ## Scanner Details
@@ -23,103 +23,83 @@ Supported DB Schema: 5
## Vulnerabilities ## Vulnerabilities
### weave-kube: (22) ### weave-kube: (16)
``` ```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
bind-libs 9.18.27-r0 apk CVE-2024-4076 High bind-libs 9.18.27-r0 apk CVE-2024-4076 High
bind-libs 9.18.27-r0 apk CVE-2024-1975 High bind-libs 9.18.27-r0 apk CVE-2024-1975 High
bind-libs 9.18.27-r0 apk CVE-2024-1737 High bind-libs 9.18.27-r0 apk CVE-2024-1737 High
bind-libs 9.18.27-r0 apk CVE-2024-0760 High bind-libs 9.18.27-r0 apk CVE-2024-0760 High
bind-tools 9.18.27-r0 apk CVE-2024-4076 High bind-tools 9.18.27-r0 apk CVE-2024-4076 High
bind-tools 9.18.27-r0 apk CVE-2024-1975 High bind-tools 9.18.27-r0 apk CVE-2024-1975 High
bind-tools 9.18.27-r0 apk CVE-2024-1737 High bind-tools 9.18.27-r0 apk CVE-2024-1737 High
bind-tools 9.18.27-r0 apk CVE-2024-0760 High bind-tools 9.18.27-r0 apk CVE-2024-0760 High
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium stdlib go1.22.2 go-module CVE-2024-24790 Critical
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium stdlib go1.22.2 go-module CVE-2024-34158 High
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-34156 High
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium stdlib go1.22.2 go-module CVE-2024-24791 High
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium stdlib go1.22.2 go-module CVE-2024-24789 Medium
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-24790 Critical stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-34158 High stdlib go1.22.2 go-module CVE-2024-24788 Unknown
stdlib go1.22.2 go-module CVE-2024-34156 High
stdlib go1.22.2 go-module CVE-2024-24791 High
stdlib go1.22.2 go-module CVE-2024-24789 Medium
stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
``` ```
### weave-npc: (10) ### weave-npc: (8)
``` ```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-24790 Critical
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-34158 High
stdlib go1.22.2 go-module CVE-2024-24790 Critical stdlib go1.22.2 go-module CVE-2024-34156 High
stdlib go1.22.2 go-module CVE-2024-34158 High stdlib go1.22.2 go-module CVE-2024-24791 High
stdlib go1.22.2 go-module CVE-2024-34156 High stdlib go1.22.2 go-module CVE-2024-24789 Medium
stdlib go1.22.2 go-module CVE-2024-24791 High stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-24789 Medium stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-24787 Medium stdlib go1.22.2 go-module CVE-2024-24788 Unknown
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
``` ```
### weave: (22) ### weave: (16)
``` ```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
bind-libs 9.18.27-r0 apk CVE-2024-4076 High bind-libs 9.18.27-r0 apk CVE-2024-4076 High
bind-libs 9.18.27-r0 apk CVE-2024-1975 High bind-libs 9.18.27-r0 apk CVE-2024-1975 High
bind-libs 9.18.27-r0 apk CVE-2024-1737 High bind-libs 9.18.27-r0 apk CVE-2024-1737 High
bind-libs 9.18.27-r0 apk CVE-2024-0760 High bind-libs 9.18.27-r0 apk CVE-2024-0760 High
bind-tools 9.18.27-r0 apk CVE-2024-4076 High bind-tools 9.18.27-r0 apk CVE-2024-4076 High
bind-tools 9.18.27-r0 apk CVE-2024-1975 High bind-tools 9.18.27-r0 apk CVE-2024-1975 High
bind-tools 9.18.27-r0 apk CVE-2024-1737 High bind-tools 9.18.27-r0 apk CVE-2024-1737 High
bind-tools 9.18.27-r0 apk CVE-2024-0760 High bind-tools 9.18.27-r0 apk CVE-2024-0760 High
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium stdlib go1.22.2 go-module CVE-2024-24790 Critical
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium stdlib go1.22.2 go-module CVE-2024-34158 High
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-34156 High
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium stdlib go1.22.2 go-module CVE-2024-24791 High
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium stdlib go1.22.2 go-module CVE-2024-24789 Medium
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-24790 Critical stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-34158 High stdlib go1.22.2 go-module CVE-2024-24788 Unknown
stdlib go1.22.2 go-module CVE-2024-34156 High
stdlib go1.22.2 go-module CVE-2024-24791 High
stdlib go1.22.2 go-module CVE-2024-24789 Medium
stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
``` ```
### weaveexec: (22) ### weaveexec: (16)
``` ```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
bind-libs 9.18.27-r0 apk CVE-2024-4076 High bind-libs 9.18.27-r0 apk CVE-2024-4076 High
bind-libs 9.18.27-r0 apk CVE-2024-1975 High bind-libs 9.18.27-r0 apk CVE-2024-1975 High
bind-libs 9.18.27-r0 apk CVE-2024-1737 High bind-libs 9.18.27-r0 apk CVE-2024-1737 High
bind-libs 9.18.27-r0 apk CVE-2024-0760 High bind-libs 9.18.27-r0 apk CVE-2024-0760 High
bind-tools 9.18.27-r0 apk CVE-2024-4076 High bind-tools 9.18.27-r0 apk CVE-2024-4076 High
bind-tools 9.18.27-r0 apk CVE-2024-1975 High bind-tools 9.18.27-r0 apk CVE-2024-1975 High
bind-tools 9.18.27-r0 apk CVE-2024-1737 High bind-tools 9.18.27-r0 apk CVE-2024-1737 High
bind-tools 9.18.27-r0 apk CVE-2024-0760 High bind-tools 9.18.27-r0 apk CVE-2024-0760 High
curl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium stdlib go1.22.2 go-module CVE-2024-24790 Critical
curl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium stdlib go1.22.2 go-module CVE-2024-34158 High
libcrypto3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-34156 High
libcurl 8.9.0-r0 8.10.0-r0 apk CVE-2024-8096 Medium stdlib go1.22.2 go-module CVE-2024-24791 High
libcurl 8.9.0-r0 8.9.1-r0 apk CVE-2024-7264 Medium stdlib go1.22.2 go-module CVE-2024-24789 Medium
libssl3 3.3.1-r3 3.3.2-r0 apk CVE-2024-6119 High stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-24790 Critical stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-34158 High stdlib go1.22.2 go-module CVE-2024-24788 Unknown
stdlib go1.22.2 go-module CVE-2024-34156 High
stdlib go1.22.2 go-module CVE-2024-24791 High
stdlib go1.22.2 go-module CVE-2024-24789 Medium
stdlib go1.22.2 go-module CVE-2024-24787 Medium
stdlib go1.22.2 go-module CVE-2024-34155 Unknown
stdlib go1.22.2 go-module CVE-2024-24788 Unknown
``` ```