Skip to content

Remedidate CVE-2023-1428 and CVE-2023-32732 in kube-fluentd-operator #3505

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
rawlingsj wants to merge 1 commit into from
Closed

Remedidate CVE-2023-1428 and CVE-2023-32732 in kube-fluentd-operator #3505

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions kube-fluentd-operator.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
package:
name: kube-fluentd-operator
version: 1.17.4
epoch: 4
version: 1.17.4 # when updating: check if we can remove CVE-2023-1428 and CVE-2023-32732 mitigation below
epoch: 5
description: Auto-configuration of Fluentd daemon-set based on Kubernetes metadata
copyright:
- license: MIT
Expand Down Expand Up @@ -68,6 +68,9 @@ pipeline:
cd fluent-plugin-google-cloud
git checkout ${{vars.FLUENT_PLUGIN_GOOGLE_CLOUD_COMMIT}}

# Mitigate CVE-2023-1428 and CVE-2023-32732
sed -i "s/gem.add_runtime_dependency 'grpc', '1.52.0'/gem.add_runtime_dependency 'grpc', '1.54.0'/g" fluent-plugin-google-cloud.gemspec

bundle config set --local path ${GEM_DIR}
bundle config set --local without 'development test'
bundle install
Expand Down