Skip to content

calico-3.31/3.31.2-r4: cve remediation#76196

Merged
Ankush-Pathak merged 3 commits into
mainfrom
cve-calico-3.31-3.31.2-r4-553ceadae1a570e1bc6ff5ecb7c3f0d9
Dec 22, 2025
Merged

calico-3.31/3.31.2-r4: cve remediation#76196
Ankush-Pathak merged 3 commits into
mainfrom
cve-calico-3.31-3.31.2-r4-553ceadae1a570e1bc6ff5ecb7c3f0d9

fix(calico-3.31): Drop crypto bump as it's not required anymore

aa9c341
Select commit
Loading
Failed to load commit list.
Octo STS / ci-apk-add succeeded Dec 22, 2025 in 0s

ci-apk-add

ci-apk-add

Details

✅ apk add calico-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-3.31=3.31.3-r0

(1/1) Installing calico-3.31 (3.31.3-r0)
OK: 0 MiB in 1 packages

✅ apk add calico-apiserver-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-apiserver-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-apiserver-3.31 (3.31.3-r0)
OK: 96 MiB in 7 packages

✅ apk add calico-apiserver-compat-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-apiserver-compat-3.31=3.31.3-r0

(1/1) Installing calico-apiserver-compat-3.31 (3.31.3-r0)
OK: 0 MiB in 1 packages

✅ apk add calico-app-policy-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-app-policy-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-app-policy-3.31 (3.31.3-r0)
OK: 75 MiB in 7 packages

✅ apk add calico-cni-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-cni-3.31=3.31.3-r0

(1/16) Installing cni-plugins-bandwidth (1.9.0-r0)
(2/16) Installing cni-plugins-host-local (1.9.0-r0)
(3/16) Installing cni-plugins-loopback (1.9.0-r0)
(4/16) Installing cni-plugins-portmap (1.9.0-r0)
(5/16) Installing cni-plugins-tuning (1.9.0-r0)
(6/16) Installing ca-certificates-bundle (20251003-r0)
(7/16) Installing wolfi-baselayout (20230201-r24)
(8/16) Installing glibc-locale-posix (2.42-r4)
(9/16) Installing libgcc (15.2.0-r6)
(10/16) Installing glibc (2.42-r4)
(11/16) Installing ld-linux (2.42-r4)
(12/16) Installing libxcrypt (4.5.2-r0)
(13/16) Installing libcrypt1 (2.42-r4)
(14/16) Installing busybox (1.37.0-r50)
(15/16) Installing flannel-cni-plugin (1.9.0.1-r0)
(16/16) Installing calico-cni-3.31 (3.31.3-r0)
OK: 133 MiB in 16 packages

✅ apk add calico-cni-compat-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-cni-compat-3.31=3.31.3-r0

(1/23) Installing cni-plugins-bandwidth (1.9.0-r0)
(2/23) Installing cni-plugins-host-local (1.9.0-r0)
(3/23) Installing cni-plugins-loopback (1.9.0-r0)
(4/23) Installing cni-plugins-portmap (1.9.0-r0)
(5/23) Installing cni-plugins-tuning (1.9.0-r0)
(6/23) Installing ca-certificates-bundle (20251003-r0)
(7/23) Installing wolfi-baselayout (20230201-r24)
(8/23) Installing glibc-locale-posix (2.42-r4)
(9/23) Installing libgcc (15.2.0-r6)
(10/23) Installing glibc (2.42-r4)
(11/23) Installing ld-linux (2.42-r4)
(12/23) Installing libxcrypt (4.5.2-r0)
(13/23) Installing libcrypt1 (2.42-r4)
(14/23) Installing busybox (1.37.0-r50)
(15/23) Installing flannel-cni-plugin (1.9.0.1-r0)
(16/23) Installing calico-cni-3.31 (3.31.3-r0)
(17/23) Installing cni-plugins-bandwidth-compat (1.9.0-r0)
(18/23) Installing cni-plugins-host-local-compat (1.9.0-r0)
(19/23) Installing cni-plugins-loopback-compat (1.9.0-r0)
(20/23) Installing cni-plugins-portmap-compat (1.9.0-r0)
(21/23) Installing cni-plugins-tuning-compat (1.9.0-r0)
(22/23) Installing flannel-cni-plugin-compat (1.9.0.1-r0)
(23/23) Installing calico-cni-compat-3.31 (3.31.3-r0)
OK: 133 MiB in 23 packages

✅ apk add calico-felix-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-felix-3.31=3.31.3-r0

(1/23) Installing ca-certificates-bundle (20251003-r0)
(2/23) Installing wolfi-baselayout (20230201-r24)
(3/23) Installing glibc-locale-posix (2.42-r4)
(4/23) Installing ld-linux (2.42-r4)
(5/23) Installing libgcc (15.2.0-r6)
(6/23) Installing glibc (2.42-r4)
(7/23) Installing libbz2-1 (1.0.8-r21)
(8/23) Installing xz (5.8.2-r0)
(9/23) Installing zlib (1.3.1-r51)
(10/23) Installing libzstd1 (1.5.7-r5)
(11/23) Installing libelf (0.194-r0)
(12/23) Installing libbpf (1.6.2-r0)
(13/23) Installing libcap (2.77-r0)
(14/23) Installing libmnl (1.0.5-r6)
(15/23) Installing libpcre2-8-0 (10.47-r0)
(16/23) Installing libsepol (3.9-r1)
(17/23) Installing libselinux (3.9-r1)
(18/23) Installing libtirpc-nokrb (1.3.7-r1)
(19/23) Installing libnftnl (1.3.1-r0)
(20/23) Installing iptables (1.8.11-r23)
(21/23) Installing iproute2 (6.17.0-r2)
(22/23) Installing libpcap (1.10.5-r3)
(23/23) Installing calico-felix-3.31 (3.31.3-r0)
OK: 362 MiB in 23 packages

✅ apk add calico-goldmane-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-goldmane-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-goldmane-3.31 (3.31.3-r0)
OK: 152 MiB in 7 packages

✅ apk add calico-key-cert-provisioner-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-key-cert-provisioner-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-key-cert-provisioner-3.31 (3.31.3-r0)
OK: 57 MiB in 7 packages

✅ apk add calico-kube-controllers-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-kube-controllers-3.31=3.31.3-r0

(1/13) Installing libxcrypt (4.5.2-r0)
(2/13) Installing libxcrypt-dev (4.5.2-r0)
(3/13) Installing linux-headers (6.18.2-r0)
(4/13) Installing ca-certificates-bundle (20251003-r0)
(5/13) Installing wolfi-baselayout (20230201-r24)
(6/13) Installing glibc-locale-posix (2.42-r4)
(7/13) Installing ld-linux (2.42-r4)
(8/13) Installing libgcc (15.2.0-r6)
(9/13) Installing glibc (2.42-r4)
(10/13) Installing nss-db (2.42-r4)
(11/13) Installing nss-hesiod (2.42-r4)
(12/13) Installing glibc-dev (2.42-r4)
(13/13) Installing calico-kube-controllers-3.31 (3.31.3-r0)
OK: 122 MiB in 13 packages

✅ apk add calico-node-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-node-3.31=3.31.3-r0

(1/37) Installing ca-certificates-bundle (20251003-r0)
(2/37) Installing wolfi-baselayout (20230201-r24)
(3/37) Installing glibc-locale-posix (2.42-r4)
(4/37) Installing libgcc (15.2.0-r6)
(5/37) Installing glibc (2.42-r4)
(6/37) Installing ld-linux (2.42-r4)
(7/37) Installing ncurses-terminfo-base (6.5_p20251025-r1)
(8/37) Installing ncurses (6.5_p20251025-r1)
(9/37) Installing bash (5.3-r3)
(10/37) Installing libmnl (1.0.5-r6)
(11/37) Installing libnfnetlink (1.0.2-r6)
(12/37) Installing libnetfilter_conntrack (1.1.0-r4)
(13/37) Installing libnetfilter_cthelper (1.0.1-r6)
(14/37) Installing libnetfilter_cttimeout (1.0.1-r6)
(15/37) Installing libnetfilter_queue (1.0.5-r8)
(16/37) Installing conntrack-tools (1.4.8-r41)
(17/37) Installing libbz2-1 (1.0.8-r21)
(18/37) Installing xz (5.8.2-r0)
(19/37) Installing zlib (1.3.1-r51)
(20/37) Installing libzstd1 (1.5.7-r5)
(21/37) Installing libelf (0.194-r0)
(22/37) Installing libbpf (1.6.2-r0)
(23/37) Installing libcap (2.77-r0)
(24/37) Installing libpcre2-8-0 (10.47-r0)
(25/37) Installing libsepol (3.9-r1)
(26/37) Installing libselinux (3.9-r1)
(27/37) Installing libtirpc-nokrb (1.3.7-r1)
(28/37) Installing libnftnl (1.3.1-r0)
(29/37) Installing xtables (1.8.11-r30)
(30/37) Installing iproute2 (6.17.0-r2)
(31/37) Installing ipset (7.24-r2)
(32/37) Installing iptables-wrappers (2-r6)
(33/37) Installing libpcap (1.10.5-r3)
(34/37) Installing libproc-2-0 (4.0.5-r42)
(35/37) Installing procps (4.0.5-r42)
(36/37) Installing runit (2.3.0-r1)
(37/37) Installing calico-node-3.31 (3.31.3-r0)
OK: 465 MiB in 37 packages

✅ apk add calico-pod2daemon-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-pod2daemon-3.31=3.31.3-r0

(1/10) Installing ca-certificates-bundle (20251003-r0)
(2/10) Installing wolfi-baselayout (20230201-r24)
(3/10) Installing glibc-locale-posix (2.42-r4)
(4/10) Installing libgcc (15.2.0-r6)
(5/10) Installing glibc (2.42-r4)
(6/10) Installing ld-linux (2.42-r4)
(7/10) Installing ncurses-terminfo-base (6.5_p20251025-r1)
(8/10) Installing ncurses (6.5_p20251025-r1)
(9/10) Installing bash (5.3-r3)
(10/10) Installing calico-pod2daemon-3.31 (3.31.3-r0)
OK: 37 MiB in 10 packages

✅ apk add calico-pod2daemon-flexvol-compat-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-pod2daemon-flexvol-compat-3.31=3.31.3-r0

(1/1) Installing calico-pod2daemon-flexvol-compat-3.31 (3.31.3-r0)
OK: 0 MiB in 1 packages

✅ apk add calico-typha-client-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-typha-client-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-typha-client-3.31 (3.31.3-r0)
OK: 71 MiB in 7 packages

✅ apk add calico-typhad-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-typhad-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-typhad-3.31 (3.31.3-r0)
OK: 85 MiB in 7 packages

✅ apk add calico-whisker-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-whisker-3.31=3.31.3-r0

(1/26) Installing ca-certificates-bundle (20251003-r0)
(2/26) Installing wolfi-baselayout (20230201-r24)
(3/26) Installing glibc-locale-posix (2.42-r4)
(4/26) Installing libgcc (15.2.0-r6)
(5/26) Installing glibc (2.42-r4)
(6/26) Installing ld-linux (2.42-r4)
(7/26) Installing libacl1 (2.3.2-r54)
(8/26) Installing libattr1 (2.5.2-r54)
(9/26) Installing libcrypto3 (3.6.0-r6)
(10/26) Installing libpcre2-8-0 (10.47-r0)
(11/26) Installing libsepol (3.9-r1)
(12/26) Installing libselinux (3.9-r1)
(13/26) Installing coreutils (9.9-r0)
(14/26) Installing dash (0.5.13-r2)
(15/26) Installing dash-binsh (0.5.13-r2)
(16/26) Installing libcap (2.77-r0)
(17/26) Installing ncurses-terminfo-base (6.5_p20251025-r1)
(18/26) Installing ncurses (6.5_p20251025-r1)
(19/26) Installing nginx-mainline-config (1.29.4-r0)
(20/26) Installing libxcrypt (4.5.2-r0)
(21/26) Installing libcrypt1 (2.42-r4)
(22/26) Installing libssl3 (3.6.0-r6)
(23/26) Installing zlib (1.3.1-r51)
(24/26) Installing nginx-mainline (1.29.4-r0)
(25/26) Installing sed (4.9-r6)
(26/26) Installing calico-whisker-3.31 (3.31.3-r0)
OK: 25 MiB in 26 packages

✅ apk add calico-whisker-backend-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calico-whisker-backend-3.31=3.31.3-r0

(1/7) Installing ca-certificates-bundle (20251003-r0)
(2/7) Installing wolfi-baselayout (20230201-r24)
(3/7) Installing glibc-locale-posix (2.42-r4)
(4/7) Installing ld-linux (2.42-r4)
(5/7) Installing libgcc (15.2.0-r6)
(6/7) Installing glibc (2.42-r4)
(7/7) Installing calico-whisker-backend-3.31 (3.31.3-r0)
OK: 34 MiB in 7 packages

✅ apk add calicoctl-3.31=3.31.3-r0:

/usr/bin/apk add --root /tmp/apk-add-check-728238668 --repository https://apk.cgr.dev/wolfi-presubmit/f29459d9a3a08db8c58626e2c688d1dac7d1a0c1 --simulate calicoctl-3.31=3.31.3-r0

(1/1) Installing calicoctl-3.31 (3.31.3-r0)
OK: 64 MiB in 1 packages
View more details on Octo STS