diff --git a/reweave/scans/scanner-version.txt b/reweave/scans/scanner-version.txt index 9b9ff02a..9662b05a 100644 --- a/reweave/scans/scanner-version.txt +++ b/reweave/scans/scanner-version.txt @@ -1,10 +1,10 @@ Application: grype -Version: 0.59.0 -Syft Version: v0.74.0 -BuildDate: 2023-03-03T21:34:44Z -GitCommit: 5754360376ace11befb1bd9fa4b0f97d79ea2344 -GitDescription: v0.59.0 +Version: 0.64.0 +Syft Version: v0.85.0 +BuildDate: 2023-07-13T15:19:47Z +GitCommit: 37f436cfb6eb871bfde9cfcb1a360c510751afc9 +GitDescription: v0.64.0 Platform: linux/amd64 -GoVersion: go1.19.6 +GoVersion: go1.19.10 Compiler: gc Supported DB Schema: 5 diff --git a/reweave/scans/weave-kube-count-vulns.txt b/reweave/scans/weave-kube-count-vulns.txt index cc8f3d81..5bd52653 100644 --- a/reweave/scans/weave-kube-count-vulns.txt +++ b/reweave/scans/weave-kube-count-vulns.txt @@ -1 +1 @@ -weave-kube CVE Count: 0 +weave-kube CVE Count: 29 diff --git a/reweave/scans/weave-kube-list-vulns.txt b/reweave/scans/weave-kube-list-vulns.txt index 0aac19f3..31f70d40 100644 --- a/reweave/scans/weave-kube-list-vulns.txt +++ b/reweave/scans/weave-kube-list-vulns.txt @@ -1,2 +1,31 @@ -NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY -github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-vpvm-3wq2-2wvm High +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +bind-libs 9.18.11-r0 apk CVE-2023-2828 High +bind-libs 9.18.11-r0 apk CVE-2023-2829 High +bind-libs 9.18.11-r0 apk CVE-2023-2911 High +bind-tools 9.18.11-r0 apk CVE-2023-2828 High +bind-tools 9.18.11-r0 apk CVE-2023-2829 High +bind-tools 9.18.11-r0 apk CVE-2023-2911 High +curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28319 High +curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28320 Medium +curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28321 Medium +curl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28322 Low +github.com/docker/distribution v2.8.1+incompatible 2.8.2-beta.1 go-module GHSA-hqxw-f8mx-cpmw High +github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-232p-vwff-86mp High +github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-33pg-m6jh-5237 Medium +github.com/docker/docker v23.0.1+incompatible 23.0.3 go-module GHSA-6wrf-mxfj-pf5p Medium +github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-g2j6-57v7-gm8c Medium +github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-m8cg-xc2p-r3fc Low +github.com/opencontainers/runc v1.1.4 1.1.5 go-module GHSA-vpvm-3wq2-2wvm High +libcap2 2.66-r0 2.66-r1 apk CVE-2023-2602 Low +libcap2 2.66-r0 2.66-r1 apk CVE-2023-2603 High +libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium +libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High +libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28319 High +libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28320 Medium +libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28321 Medium +libcurl 7.88.1-r1 8.1.0-r0 apk CVE-2023-28322 Low +libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium +libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High +libxml2 2.10.3-r1 2.10.4-r0 apk CVE-2023-28484 Medium +libxml2 2.10.3-r1 2.10.4-r0 apk CVE-2023-29469 Medium + diff --git a/reweave/scans/weave-npc-count-vulns.txt b/reweave/scans/weave-npc-count-vulns.txt index f1d6653e..53eb7ab5 100644 --- a/reweave/scans/weave-npc-count-vulns.txt +++ b/reweave/scans/weave-npc-count-vulns.txt @@ -1 +1 @@ -weave-npc CVE Count: 0 +weave-npc CVE Count: 4 diff --git a/reweave/scans/weave-npc-list-vulns.txt b/reweave/scans/weave-npc-list-vulns.txt index 8900c02c..a764175e 100644 --- a/reweave/scans/weave-npc-list-vulns.txt +++ b/reweave/scans/weave-npc-list-vulns.txt @@ -1 +1,6 @@ -No vulnerabilities found +NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY +libcrypto3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium +libcrypto3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High +libssl3 3.0.8-r3 3.0.8-r4 apk CVE-2023-1255 Medium +libssl3 3.0.8-r3 3.0.9-r0 apk CVE-2023-2650 High +