Skip to content

cluster-api-aws-controller/2.8.4-r0: cve remediation #61666

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
octo-sts wants to merge 1 commit into from

cluster-api-aws-controller/2.8.4-r0: fix GHSA-hj57-j5cw-2mwp

0130873
Select commit
Loading
Failed to load commit list.
Closed

cluster-api-aws-controller/2.8.4-r0: cve remediation #61666

cluster-api-aws-controller/2.8.4-r0: fix GHSA-hj57-j5cw-2mwp
0130873
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build (eco-2-28) completed Aug 5, 2025 in 5m 40s

Failed to build APKs

Build ID: 979b393e-979a-4926-bbd8-c3d4a414b8e2
Error: failed to build cluster-api-aws-controller: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

x86_64 Logs

Click to expand 
parsed env
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.113; latest: 0.2.114). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build cluster-api-aws-controller.yaml --gcplog --source-dir cluster-api-aws-controller --arch x86_64 --arch=x86_64 --env-file=build-x86_64.env --namespace=chainguard --pipeline-dir=pipelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --package-append=ct-manylinux-2.28 --package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --git-repo-url=https://github.com/wolfi-dev/os]
melange v0.30.3+dirty is building:
populating workspace /tmp/melange-workspace-1603067803 from cluster-api-aws-controller
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r2 binutils=2.45-r0 build-base=1-r8 busybox=1.37.0-r47 ca-certificates-bundle=20250619-r5 ct-manylinux-2.28=1.27.0-r1 cyrus-sasl=2.1.28-r43 gcc-14-default=14.3.0-r5 gcc-14=14.3.0-r5 gdbm=1.26-r0 gfortran-14=14.3.0-r5 git=2.50.1-r1 glibc-dev=2.41-r56 glibc-locale-posix=2.41-r56 glibc=2.41-r56 gmp=6.3.0-r8 go-1.24=1.24.5-r2 gobump=0.9.1-r1 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r36 krb5-conf=1.0-r7 krb5-libs=1.21.3-r45 ld-linux=2.41-r56 libbrotlicommon1=1.1.0-r7 libbrotlidec1=1.1.0-r7 libcom_err=1.47.3-r0 libcrypt1=2.41-r56 libcrypto3=3.5.1-r1 libcurl-openssl4=8.15.0-r4 libexpat1=2.7.1-r2 libgcc=15.1.0-r4 libgfortran-14=14.3.0-r5 libgfortran=15.1.0-r4 libidn2=2.3.8-r3 libldap=2.6.10-r5 libnghttp2-14=1.66.0-r1 libpcre2-8-0=10.45-r3 libpsl=0.21.5-r6 libquadmath=15.1.0-r4 libssl3=3.5.1-r1 libstdc++-14-dev=14.3.0-r5 libstdc++-14=14.3.0-r5 libstdc++=15.1.0-r4 libunistring=1.3-r4 libverto=0.3.2-r6 libxcrypt-dev=4.4.38-r3 libxcrypt=4.4.38-r3 libzstd1=1.5.7-r3 linux-headers=6.16-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20250621-r1 ncurses=6.5_p20250621-r1 nss-db=2.41-r56 nss-hesiod=2.41-r56 openssf-compiler-options=20240627-r26 pkgconf=2.5.1-r1 posix-cc-wrappers=1-r7 readline=8.3-r1 sqlite-libs=3.50.4-r0 wolfi-baselayout=20230201-r23 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []
installing libgcc (15.1.0-r4)
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing bash (5.3-r2)
installing libstdc++ (15.1.0-r4)
installing libzstd1 (1.5.7-r3)
installing binutils (2.45-r0)
installing libquadmath (15.1.0-r4)
installing libstdc++-14 (14.3.0-r5)
installing libstdc++-14-dev (14.3.0-r5)
installing posix-cc-wrappers (1-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing libxcrypt (4.4.38-r3)
installing libxcrypt-dev (4.4.38-r3)
installing nss-db (2.41-r56)
installing nss-hesiod (2.41-r56)
installing linux-headers (6.16-r0)
installing glibc-dev (2.41-r56)
installing openssf-compiler-options (20240627-r26)
installing gcc-14 (14.3.0-r5)
installing libgfortran-14 (14.3.0-r5)
installing gfortran-14 (14.3.0-r5)
installing libgfortran (15.1.0-r4)
installing gcc-14-default (14.3.0-r5)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r8)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r47)
installing ct-manylinux-2.28 (1.27.0-r1)
installing libcrypto3 (3.5.1-r1)
installing gdbm (1.26-r0)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r43)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing libcom_err (1.47.3-r0)
installing keyutils-libs (1.6.3-r36)
installing libssl3 (3.5.1-r1)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.21.3-r45)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libunistring (1.3-r4)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.15.0-r4)
installing libexpat1 (2.7.1-r2)
installing libpcre2-8-0 (10.45-r3)
installing git (2.50.1-r1)
installing go-1.24 (1.24.5-r2)
installing gobump (0.9.1-r1)
running step "git-checkout"
[git checkout] repo='https://github.com/kubernetes-sigs/cluster-api-provider-aws' dest='.' depth='unset' branch='' tag='v2.8.4' expcommit='49658babd14cb9590f9fef8330243d530f7d6602' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.9eqDY4
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v2.8.4 --depth=1 https://github.com/kubernetes-sigs/cluster-api-provider-aws /tmp/tmp.9eqDY4
warning: refs/tags/v2.8.4 27c6409c5434229baec90bdbe44b1aa3371dfb70 is not a commit!
[git checkout] execute: cd /tmp/tmp.9eqDY4
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.8.4:refs/origin/tags/v2.8.4
[git checkout] execute: git checkout --quiet origin/tags/v2.8.4
[git checkout] tag v2.8.4 is 49658babd14cb9590f9fef8330243d530f7d6602
running step "go/bump"
2025/08/05 07:26:34 Local Go version: 1.24.5
2025/08/05 07:26:34 Running go mod tidy with go version '1.24.5' ...
2025/08/05 07:26:37 Update package: github.com/coreos/ignition
2025/08/05 07:26:37 Running go mod edit -droprequire ...
2025/08/05 07:26:37 Running go get ...
Error: failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/coreos/[email protected]: invalid version: go.mod has post-v2 module path "github.com/coreos/ignition/v2" at revision v2.14.0
2025/08/05 07:26:40 failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/coreos/[email protected]: invalid version: go.mod has post-v2 module path "github.com/coreos/ignition/v2" at revision v2.14.0
failed to build package: unable to run package cluster-api-aws-controller pipeline: unable to run pipeline: unable to run pipeline: exit status 1
failed to build: command melange failed: exit status 1
build failed: command melange failed: exit status 1

aarch64 Logs

Click to expand 
parsed env
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.113; latest: 0.2.114). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build cluster-api-aws-controller.yaml --gcplog --source-dir cluster-api-aws-controller --arch aarch64 --arch=aarch64 --env-file=build-aarch64.env --namespace=chainguard --pipeline-dir=pipelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/chainguard-private --repository-append=https://apk.cgr.dev/chainguard-2.28 --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --package-append=ct-manylinux-2.28 --package-append=gcc-14-default --repository-append=https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 --git-repo-url=https://github.com/wolfi-dev/os]
melange v0.30.3+dirty is building:
populating workspace /tmp/melange-workspace-528980106 from cluster-api-aws-controller
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789 https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r2 binutils=2.45-r0 build-base=1-r8 busybox=1.37.0-r47 ca-certificates-bundle=20250619-r5 ct-manylinux-2.28=1.27.0-r1 cyrus-sasl=2.1.28-r43 gcc-14-default=14.3.0-r5 gcc-14=14.3.0-r5 gdbm=1.26-r0 gfortran-14=14.3.0-r5 git=2.50.1-r1 glibc-dev=2.41-r56 glibc-locale-posix=2.41-r56 glibc=2.41-r56 gmp=6.3.0-r8 go-1.24=1.24.5-r2 gobump=0.9.1-r1 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r36 krb5-conf=1.0-r7 krb5-libs=1.21.3-r45 ld-linux=2.41-r56 libbrotlicommon1=1.1.0-r7 libbrotlidec1=1.1.0-r7 libcom_err=1.47.3-r0 libcrypt1=2.41-r56 libcrypto3=3.5.1-r1 libcurl-openssl4=8.15.0-r4 libexpat1=2.7.1-r2 libgcc=15.1.0-r4 libgfortran-14=14.3.0-r5 libgfortran=15.1.0-r4 libidn2=2.3.8-r3 libldap=2.6.10-r5 libnghttp2-14=1.66.0-r1 libpcre2-8-0=10.45-r3 libpsl=0.21.5-r6 libquadmath=15.1.0-r4 libssl3=3.5.1-r1 libstdc++-14-dev=14.3.0-r5 libstdc++-14=14.3.0-r5 libstdc++=15.1.0-r4 libunistring=1.3-r4 libverto=0.3.2-r6 libxcrypt-dev=4.4.38-r3 libxcrypt=4.4.38-r3 libzstd1=1.5.7-r3 linux-headers=6.16-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20250621-r1 ncurses=6.5_p20250621-r1 nss-db=2.41-r56 nss-hesiod=2.41-r56 openssf-compiler-options=20240627-r26 pkgconf=2.5.1-r1 posix-cc-wrappers=1-r7 readline=8.3-r1 sqlite-libs=3.50.4-r0 wolfi-baselayout=20230201-r23 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: []
installing libgcc (15.1.0-r4)
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing bash (5.3-r2)
installing libstdc++ (15.1.0-r4)
installing libzstd1 (1.5.7-r3)
installing binutils (2.45-r0)
installing libquadmath (15.1.0-r4)
installing libstdc++-14 (14.3.0-r5)
installing libstdc++-14-dev (14.3.0-r5)
installing posix-cc-wrappers (1-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing libxcrypt (4.4.38-r3)
installing libxcrypt-dev (4.4.38-r3)
installing nss-db (2.41-r56)
installing nss-hesiod (2.41-r56)
installing linux-headers (6.16-r0)
installing glibc-dev (2.41-r56)
installing openssf-compiler-options (20240627-r26)
installing gcc-14 (14.3.0-r5)
installing libgfortran-14 (14.3.0-r5)
installing gfortran-14 (14.3.0-r5)
installing libgfortran (15.1.0-r4)
installing gcc-14-default (14.3.0-r5)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r8)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r47)
installing ct-manylinux-2.28 (1.27.0-r1)
installing libcrypto3 (3.5.1-r1)
installing gdbm (1.26-r0)
installing readline (8.3-r1)
installing sqlite-libs (3.50.4-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r43)
installing libbrotlicommon1 (1.1.0-r7)
installing libbrotlidec1 (1.1.0-r7)
installing libcom_err (1.47.3-r0)
installing keyutils-libs (1.6.3-r36)
installing libssl3 (3.5.1-r1)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.21.3-r45)
installing libldap (2.6.10-r5)
installing libnghttp2-14 (1.66.0-r1)
installing libunistring (1.3-r4)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.15.0-r4)
installing libexpat1 (2.7.1-r2)
installing libpcre2-8-0 (10.45-r3)
installing git (2.50.1-r1)
installing go-1.24 (1.24.5-r2)
installing gobump (0.9.1-r1)
running step "git-checkout"
[git checkout] repo='https://github.com/kubernetes-sigs/cluster-api-provider-aws' dest='.' depth='unset' branch='' tag='v2.8.4' expcommit='49658babd14cb9590f9fef8330243d530f7d6602' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.l4p2gQ
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v2.8.4 --depth=1 https://github.com/kubernetes-sigs/cluster-api-provider-aws /tmp/tmp.l4p2gQ
warning: refs/tags/v2.8.4 27c6409c5434229baec90bdbe44b1aa3371dfb70 is not a commit!
[git checkout] execute: cd /tmp/tmp.l4p2gQ
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.8.4:refs/origin/tags/v2.8.4
[git checkout] execute: git checkout --quiet origin/tags/v2.8.4
[git checkout] tag v2.8.4 is 49658babd14cb9590f9fef8330243d530f7d6602
running step "go/bump"
2025/08/05 07:26:53 Local Go version: 1.24.5
2025/08/05 07:26:53 Running go mod tidy with go version '1.24.5' ...
2025/08/05 07:26:56 Update package: github.com/coreos/ignition
2025/08/05 07:26:56 Running go mod edit -droprequire ...

Indexes

https://apk.cgr.dev/chainguard-2.28-presubmit/1555500959d21a53ef1e9b008558576a64d6f789

❌ Failed Packages

  • ❌ cluster-api-aws-controller (error | 1m48s)

Packages

More Observability

Command

cg build log \
  --build-id 979b393e-979a-4926-bbd8-c3d4a414b8e2 \
  --project prod-eco-8de7 \
  --cluster elastic-pre \
  --namespace pre-eco-2-28 \
  --start 2025-08-05T07:21:21Z \
  --end 2025-08-05T07:37:02Z
View more details on Chainguard Internal