Skip to content

trivy/0.64.1-r2: cve remediation - #61154

Merged
kbsteere merged 2 commits into
mainfrom
cve-trivy-0.64.1-r2-d89a3dc48070e80205f50b15821ca4cf
Jul 30, 2025
Merged

trivy/0.64.1-r2: cve remediation#61154
kbsteere merged 2 commits into
mainfrom
cve-trivy-0.64.1-r2-d89a3dc48070e80205f50b15821ca4cf

fix: remove unrequired go/bump

dce1b09
Select commit
Loading
Failed to load commit list.
Octo STS / ci-diff-report succeeded Jul 30, 2025 in 0s

Package diff

Package diff

Details

Package Diffs

aarch64/trivy-0.64.1-r2.apk -> aarch64/trivy-0.64.1-r3.apk

📦 Package diff:

  &apk.Package{
  	Name:        "trivy",
- 	Version:     "0.64.1-r2",
+ 	Version:     "0.64.1-r3",
  	Arch:        "aarch64",
  	Description: "Simple and comprehensive vulnerability scanner for containers",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0xd5, 0xea, 0x6c, 0xe8, 0xf6, 0x9a, 0x19, 0xf9, 0xdf, 0x5d, 0x58, 0xab, 0xbc, 0x2f, 0xcb, 0x74, // -|..l......]X../.t|
- 		0x8b, 0x65, 0x27, 0x07,                                                                         // -|.e'.|
+ 		0xac, 0x46, 0x4e, 0x08, 0x4e, 0xf8, 0x1b, 0xcc, 0xe4, 0x43, 0xa2, 0x03, 0x06, 0x3c, 0x55, 0x86, // +|.FN.N....C...<U.|
+ 		0xc6, 0x6b, 0xc1, 0x0b,                                                                         // +|.k..|
  	},
  	Dependencies:     {"so:ld-linux-aarch64.so.1", "so:libc.so.6"},
- 	Provides:         []string{"cmd:trivy=0.64.1-r2"},
+ 	Provides:         []string{"cmd:trivy=0.64.1-r3"},
  	InstallIf:        nil,
- 	Size:             78908380,
+ 	Size:             78915202,
- 	InstalledSize:    270961727,
+ 	InstalledSize:    270961845,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-17 22:06:37 +0000 UTC",
+ 	BuildTime:        s"2025-07-30 20:29:01 +0000 UTC",
- 	BuildDate:        1752789997,
+ 	BuildDate:        1753907341,
  	RepoCommit: strings.Join({
- 		"221",
  		"3",
- 		"809e0e447269de43f40f615c615776753c55",
+ 		"edfe3f922efc832daa9067970b6cd88c4e438ab",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/trivy-0.64.1-r3.spdx.json

➖ Removed:

  • var/lib/db/sbom/trivy-0.64.1-r2.spdx.json

🔺 Changed:

.PKGINFO
- -rw-r--r-- 460 2025-07-17 22:06:37 .PKGINFO
+ -rw-r--r-- 460 2025-07-30 20:29:01 .PKGINFO
.melange.yaml
- -rw-r--r-- 12295 2025-07-17 22:06:37 .melange.yaml
+ -rw-r--r-- 12458 2025-07-30 20:29:01 .melange.yaml
usr/bin/trivy
- -rwxr-xr-x 270929704 2025-07-17 22:06:37 trivy
-   APK-TOOLS.checksum.SHA1: "5e07795fa0219e2a4075b7b4ddd46d5db61bc4eb"
+ -rwxr-xr-x 270929720 2025-07-30 20:29:01 trivy
+   APK-TOOLS.checksum.SHA1: "8cf222e1b2821e2ac80867bba3d3a1a79b2c4cb7"

x86_64/trivy-0.64.1-r2.apk -> x86_64/trivy-0.64.1-r3.apk

📦 Package diff:

  &apk.Package{
  	Name:        "trivy",
- 	Version:     "0.64.1-r2",
+ 	Version:     "0.64.1-r3",
  	Arch:        "x86_64",
  	Description: "Simple and comprehensive vulnerability scanner for containers",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0x5e, 0x08, 0x02, 0x64, 0x92, 0x98, 0xab, 0x00, 0x7a, 0xc2, 0x5c, 0x2b, 0x29, 0xcb, 0x83, 0x5a, // -|^..d....z.\+)..Z|
- 		0xb4, 0x9f, 0xd6, 0xf9,                                                                         // -|....|
+ 		0xa9, 0x4f, 0x74, 0x10, 0xb3, 0xe4, 0xd1, 0x38, 0x17, 0xc0, 0x2d, 0x8a, 0x05, 0xa0, 0x33, 0x61, // +|.Ot....8..-...3a|
+ 		0xf9, 0x1a, 0x83, 0xd7,                                                                         // +|....|
  	},
  	Dependencies:     {"so:ld-linux-x86-64.so.2", "so:libc.so.6"},
- 	Provides:         []string{"cmd:trivy=0.64.1-r2"},
+ 	Provides:         []string{"cmd:trivy=0.64.1-r3"},
  	InstallIf:        nil,
- 	Size:             84611639,
+ 	Size:             84609658,
- 	InstalledSize:    282875046,
+ 	InstalledSize:    282875156,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-17 22:06:37 +0000 UTC",
+ 	BuildTime:        s"2025-07-30 20:29:01 +0000 UTC",
- 	BuildDate:        1752789997,
+ 	BuildDate:        1753907341,
  	RepoCommit: strings.Join({
- 		"a674cb4968d4c1874eb94daa78e594494171c00f",
+ 		"3edfe3f922efc832daa9067970b6cd88c4e438ab",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/trivy-0.64.1-r3.spdx.json

➖ Removed:

  • var/lib/db/sbom/trivy-0.64.1-r2.spdx.json

🔺 Changed:

.PKGINFO
- -rw-r--r-- 458 2025-07-17 22:06:37 .PKGINFO
+ -rw-r--r-- 458 2025-07-30 20:29:01 .PKGINFO
.melange.yaml
- -rw-r--r-- 12259 2025-07-17 22:06:37 .melange.yaml
+ -rw-r--r-- 12422 2025-07-30 20:29:01 .melange.yaml
usr/bin/trivy
- -rwxr-xr-x 282843024 2025-07-17 22:06:37 trivy
-   APK-TOOLS.checksum.SHA1: "7f5f4586527930dad4928267991d7880b4168bf6"
+ -rwxr-xr-x 282843032 2025-07-30 20:29:01 trivy
+   APK-TOOLS.checksum.SHA1: "4848cc249917d6fbc6d126e3221e96c202c225d1"