Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Force updating libcrypto3 and libssl3 in docker image #3390

Merged
merged 4 commits into from
Feb 11, 2023

Conversation

Raffo
Copy link
Contributor

@Raffo Raffo commented Feb 10, 2023

Description

Fixes #3385 by forcing updating libcrypto3 and libssl3. There are patch versions released for alpine, but no new image tagged that contains those fixes. This change will force CI to update those, resolving the vulnerabilities.

Signed-off-by: Raffaele Di Fazio <difazio.raffaele@gmail.com>
@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Feb 10, 2023
@k8s-ci-robot k8s-ci-robot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Feb 10, 2023
@Raffo Raffo self-assigned this Feb 10, 2023
@Raffo Raffo added the tide/merge-method-squash Denotes a PR that should be squashed by tide when it merges. label Feb 10, 2023
Copy link
Member

@njuettner njuettner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: njuettner, Raffo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Feb 11, 2023
@k8s-ci-robot k8s-ci-robot merged commit f552d11 into master Feb 11, 2023
BadLiveware pushed a commit to BadLiveware/external-dns that referenced this pull request Mar 5, 2023
…s#3390)

* forces updating libcrypto3 and libssl3 in docker image

Signed-off-by: Raffaele Di Fazio <difazio.raffaele@gmail.com>

* -U probably

* --latest

* pin versions

---------

Signed-off-by: Raffaele Di Fazio <difazio.raffaele@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. tide/merge-method-squash Denotes a PR that should be squashed by tide when it merges.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

It's you again libcrypto3 and libssl3
3 participants