Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update various dependencies to mitigate CVE warnings #493

Merged
merged 4 commits into from
Nov 19, 2021
Merged

Update various dependencies to mitigate CVE warnings #493

merged 4 commits into from
Nov 19, 2021

Commits on Nov 19, 2021

  1. Update containerd and runc dependencies 

    To mitigate warnings for CVE-2021-41190 which effects both.

Signed-off-by: Hidde Beydals <[email protected]>
    @hiddeco
    hiddeco committed Nov 19, 2021
    Configuration menu
    Copy the full SHA
    d10c515 View commit details
    Browse the repository at this point in the history

  2. Update docker/distribution to v2.7.0-rc.0 

    This mitigates another warning for CVE-2017-11468, which is mostly
triggered because a part of Helm depends on it that our code paths
never reach.

Signed-off-by: Hidde Beydals <[email protected]>
    @hiddeco
    hiddeco committed Nov 19, 2021
    Configuration menu
    Copy the full SHA
    19eb3d5 View commit details
    Browse the repository at this point in the history

  3. Update docker/cli to v20.10.9 

    To mitigate warnings for CVE-2021-41092. Because even if there is no
impact whatsoever, we are nice people.

Signed-off-by: Hidde Beydals <[email protected]>
    @hiddeco
    hiddeco committed Nov 19, 2021
    Configuration menu
    Copy the full SHA
    f933cb5 View commit details
    Browse the repository at this point in the history

  4. Update opencontainers/image-spec to v1.0.2 

    Another patch for CVE-2021-41190.

Signed-off-by: Hidde Beydals <[email protected]>
    @hiddeco
    hiddeco committed Nov 19, 2021
    Configuration menu
    Copy the full SHA
    4ce894a View commit details
    Browse the repository at this point in the history