6.0.4.4.z-aci-containers-host-ovscni-10333-2024-12-19_20:04:21

Commit: 27c297d9b069fea210759d6ecc9a8f4fd3409282 Tags: 6.0.4.4.81c2369.z, 6.0.4.4.81c2369.121924.10333 ImageId: sha256:dabb7457ec9874a9e75346f45898385f7f6d39b7f1d11767ef75701851d1d3d4 DockerSha: 79fa09c17e884c3972c87309f656b645a3caf5d3553d1a98dfce5cc04c47550e QuaySha: 79fa09c17e884c3972c87309f656b645a3caf5d3553d1a98dfce5cc04c47550e
noironetworks · Dec 20, 2024 · 2fdb7e2 · 2fdb7e2
1 parent 9d6f3ef
commit 2fdb7e2
Show file tree

Hide file tree

Showing 64 changed files with 15,958 additions and 14,664 deletions.
diff --git a/docs/release_artifacts/6.0.4.4/z/acc-provision-operator/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/acc-provision-operator/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/acc-provision-operator/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/acc-provision-operator/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-certmanager/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-certmanager/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-certmanager/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-certmanager/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-controller/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-controller/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-controller/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-controller/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-buildlog.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-buildlog.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-cve.txt
@@ -1,5 +1,4 @@
-NAME                 INSTALLED  FIXED-IN  TYPE       VULNERABILITY        SEVERITY 
-golang.org/x/crypto  v0.21.0    0.31.0    go-module  GHSA-v778-237x-gjrc  Critical
+No vulnerabilities found
 
 quay.io/noiro/aci-containers-host-ovscni:6.0.4.4.81c2369.z (redhat 9.5)
 =======================================================================
@@ -8,7 +7,8 @@ Total: 67 (UNKNOWN: 0, LOW: 45, MEDIUM: 22, HIGH: 0, CRITICAL: 0)
 ┌─────────────────────────────┬────────────────┬──────────┬─────────────────────┬─────────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
 │           Library           │ Vulnerability  │ Severity │       Status        │  Installed Version  │ Fixed Version │                            Title                            │
 ├─────────────────────────────┼────────────────┼──────────┼─────────────────────┼─────────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
-│ bzip2-libs                  │ CVE-2019-12900 │ LOW      │ affected            │ 1.0.8-9.el9         │               │ bzip2: out-of-bounds write in function BZ2_decompress       │
+│ bzip2-libs                  │ CVE-2019-12900 │ LOW      │ affected            │ 1.0.8-9.el9         │               │ bzip2: bzip2: Data integrity error when decompressing (with │
+│                             │                │          │                     │                     │               │ data integrity tests fail)....                              │
 │                             │                │          │                     │                     │               │ https://avd.aquasec.com/nvd/cve-2019-12900                  │
 ├─────────────────────────────┼────────────────┤          │                     ├─────────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
 │ curl                        │ CVE-2024-7264  │          │                     │ 7.76.1-31.el9       │               │ curl: libcurl: ASN.1 date parser overread                   │
@@ -251,16 +251,3 @@ Total: 67 (UNKNOWN: 0, LOW: 45, MEDIUM: 22, HIGH: 0, CRITICAL: 0)
 │                             │                │          │                     │                     │               │ Fapi_VerifyQuote                                            │
 │                             │                │          │                     │                     │               │ https://avd.aquasec.com/nvd/cve-2024-29040                  │
 └─────────────────────────────┴────────────────┴──────────┴─────────────────────┴─────────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘
-
-usr/local/bin/aci-containers-host-agent (gobinary)
-==================================================
-Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 1)
-
-┌─────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────┐
-│       Library       │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                         Title                          │
-├─────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────┤
-│ golang.org/x/crypto │ CVE-2024-45337 │ CRITICAL │ fixed  │ v0.21.0           │ 0.31.0        │ golang.org/x/crypto/ssh: Misuse of                     │
-│                     │                │          │        │                   │               │ ServerConfig.PublicKeyCallback may cause authorization │
-│                     │                │          │        │                   │               │ bypass in golang.org/x/crypto                          │
-│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-45337             │
-└─────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────┘
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-sbom.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host-ovscni/6.0.4.4-sbom.txt
@@ -54,7 +54,7 @@ github.com/modern-go/concurrent                                              v0.
 github.com/modern-go/reflect2                                                v1.0.2                                    go-module  
 github.com/munnerz/goautoneg                                                 v0.0.0-20191010083416-a7dc8b61c822        go-module  
 github.com/natefinch/pie                                                     v0.0.0-20170715172608-9a0d72014007        go-module  
-github.com/noironetworks/aci-containers                                      3405d021cb5be250cef9d1a6dbb2e99a449882f7  go-module  
+github.com/noironetworks/aci-containers                                      27c297d9b069fea210759d6ecc9a8f4fd3409282  go-module  
 github.com/opencontainers/go-digest                                          v1.0.0                                    go-module  
 github.com/openshift/api                                                     v0.0.0-20240125191952-1e2afa0f76cf        go-module  
 github.com/ovn-org/libovsdb                                                  v0.0.0-20210422150337-f29ae9b43ea5        go-module  
@@ -88,14 +88,14 @@ go.opentelemetry.io/otel/trace                                               v1.
 go.opentelemetry.io/proto/otlp                                               v1.1.0                                    go-module  
 go.uber.org/multierr                                                         v1.11.0                                   go-module  
 go.uber.org/zap                                                              v1.26.0                                   go-module  
-golang.org/x/crypto                                                          v0.21.0                                   go-module  
+golang.org/x/crypto                                                          v0.31.0                                   go-module  
 golang.org/x/exp                                                             v0.0.0-20240119083558-1b970713d09a        go-module  
-golang.org/x/net                                                             v0.23.0                                   go-module  
+golang.org/x/net                                                             v0.33.0                                   go-module  
 golang.org/x/oauth2                                                          v0.16.0                                   go-module  
-golang.org/x/sync                                                            v0.6.0                                    go-module  
-golang.org/x/sys                                                             v0.18.0                                   go-module  
-golang.org/x/term                                                            v0.18.0                                   go-module  
-golang.org/x/text                                                            v0.14.0                                   go-module  
+golang.org/x/sync                                                            v0.10.0                                   go-module  
+golang.org/x/sys                                                             v0.28.0                                   go-module  
+golang.org/x/term                                                            v0.27.0                                   go-module  
+golang.org/x/text                                                            v0.21.0                                   go-module  
 golang.org/x/time                                                            v0.5.0                                    go-module  
 google.golang.org/genproto/googleapis/api                                    v0.0.0-20240125205218-1f4bbc51befe        go-module  
 google.golang.org/genproto/googleapis/rpc                                    v0.0.0-20240125205218-1f4bbc51befe        go-module  

diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-host/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-host/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-operator/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-operator/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-operator/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-operator/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-webhook/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-webhook/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/aci-containers-webhook/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/aci-containers-webhook/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/cnideploy/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/cnideploy/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/cnideploy/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/cnideploy/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/openvswitch/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/openvswitch/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/openvswitch/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/openvswitch/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/opflex/6.0.4.4-cve-base.txt b/docs/release_artifacts/6.0.4.4/z/opflex/6.0.4.4-cve-base.txt
diff --git a/docs/release_artifacts/6.0.4.4/z/opflex/6.0.4.4-quay-cve.txt b/docs/release_artifacts/6.0.4.4/z/opflex/6.0.4.4-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/acc-provision-operator/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/acc-provision-operator/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/acc-provision-operator/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/acc-provision-operator/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-certmanager/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-certmanager/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-certmanager/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-certmanager/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-controller/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-controller/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-controller/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-controller/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-host-ovscni/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-host-ovscni/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-host-ovscni/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-host-ovscni/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-host/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-host/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-host/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-host/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-operator/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-operator/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-operator/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-operator/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-webhook/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-webhook/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/aci-containers-webhook/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/aci-containers-webhook/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/cnideploy/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/cnideploy/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/cnideploy/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/cnideploy/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/openvswitch/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/openvswitch/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/openvswitch/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/openvswitch/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/opflex/6.1.1.2-cve-base.txt b/docs/release_artifacts/6.1.1.2/z/opflex/6.1.1.2-cve-base.txt
diff --git a/docs/release_artifacts/6.1.1.2/z/opflex/6.1.1.2-quay-cve.txt b/docs/release_artifacts/6.1.1.2/z/opflex/6.1.1.2-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/acc-provision-operator/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/acc-provision-operator/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/acc-provision-operator/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/acc-provision-operator/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-certmanager/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-certmanager/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-certmanager/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-certmanager/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-controller/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-controller/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-controller/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-controller/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-host-ovscni/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-host-ovscni/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-host-ovscni/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-host-ovscni/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-host/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-host/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-host/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-host/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-operator/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-operator/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-operator/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-operator/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-webhook/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-webhook/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/aci-containers-webhook/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/aci-containers-webhook/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/cnideploy/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/cnideploy/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/cnideploy/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/cnideploy/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/openvswitch/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/openvswitch/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/openvswitch/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/openvswitch/6.1.2.1-quay-cve.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/opflex/6.1.2.1-cve-base.txt b/docs/release_artifacts/6.1.2.1/z/opflex/6.1.2.1-cve-base.txt
diff --git a/docs/release_artifacts/6.1.2.1/z/opflex/6.1.2.1-quay-cve.txt b/docs/release_artifacts/6.1.2.1/z/opflex/6.1.2.1-quay-cve.txt