diff --git a/CHANGELOG.md b/CHANGELOG.md index f30555fc9..03b00db03 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,10 @@ +## Release 2.8.5 + +This release has upgraded dependencies based on CVE recommendations. + +* Build with Go version 1.21.9 +* A dependency has been updated + ## Release 2.8.4 The alpine base image used by `weave-kube` and `weave-npc` was upgraded to version 3.19.1 in the previous release. In this version, the default iptables backend is nftables, and the legacy backend is not included. Our scripts and programs assume legacy as the default backend, and change to nft if autodetected, or if we ask for it. So, the build Dockerfile (reweave/build/Dockerfile) was changed to also install the Alpine `iptables-legacy` package , and change the `iptables-{save,restore}` symbolic links to point to the legacy backend by default. diff --git a/reweave/CHANGELOG.md b/reweave/CHANGELOG.md index 14b8e6700..bf86336e2 100644 --- a/reweave/CHANGELOG.md +++ b/reweave/CHANGELOG.md @@ -2,7 +2,12 @@ All changes made to the weave net codebase during the reweave effort will be documented in this file. -## 2.8.5-beta1 +## 2.8.5 + +* Changed version in `reweave/Makefile` to 2.8.5 +* Modified reweave and main CHANGELOG.md + +## 2.8.5-beta1 (ac180cfc) ### Changed diff --git a/reweave/Makefile b/reweave/Makefile index 989fba571..b29ce8667 100644 --- a/reweave/Makefile +++ b/reweave/Makefile @@ -1,4 +1,4 @@ -IMAGE_VERSION ?= 2.8.5-beta1 +IMAGE_VERSION ?= 2.8.5 REGISTRY_USER ?= rajchaudhuri ALPINE_BASEIMAGE ?= alpine:3.19.1 diff --git a/reweave/build/Dockerfile b/reweave/build/Dockerfile index f6a9ac7d0..945969e6a 100644 --- a/reweave/build/Dockerfile +++ b/reweave/build/Dockerfile @@ -26,8 +26,7 @@ RUN < /etc/apt/apt.conf.d/80-retries for platform in ${DEB_CROSSPLATFORMS}; do dpkg --add-architecture $platform; done -apt-get update --error-on=any -apt-get upgrade -y +apt-get update apt-get install -y build-essential for platform in ${DEB_CROSSPLATFORMS}; do apt-get install -y crossbuild-essential-${platform}; done apt-get clean diff --git a/reweave/scans/report.md b/reweave/scans/report.md index 0c249a7cc..6fe553076 100644 --- a/reweave/scans/report.md +++ b/reweave/scans/report.md @@ -1,9 +1,9 @@ # Vulnerability Report ``` -Report date: 2024-04-04 +Report date: 2024-04-06 Unique vulnerability count: 17 -Images version: 2.8.5-beta1 +Images version: 2.8.5 ``` ## Scanner Details