Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automated cherry pick of #6334: Update CNI binaries version to v1.4.1 (#6334) #6352

Conversation

antoninbas
Copy link
Contributor

Cherry pick of #6334 on release-2.0.

#6334: Update CNI binaries version to v1.4.1 (#6334)

For details on the cherry pick process, see the cherry pick requests page.

CVE scanners are currently flagging CVE-2023-45288 (HIGH) in the
antrea-agent image, because of the CNI plugin binaries. We bump up the
version to v1.4.1 to avoid the warnings from CVE scanners.

Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>
@antoninbas antoninbas added the kind/cherry-pick Categorizes issue or PR as related to the cherry-pick of a bug fix from the main branch to a release label May 21, 2024
@antoninbas antoninbas requested a review from tnqn May 21, 2024 18:00
@antoninbas
Copy link
Contributor Author

Cherry-picking this to release-2.0 to make our daily security scan succeed.
As a reminder, the CVE that this update addresses is not impacting Antrea.

@antoninbas
Copy link
Contributor Author

/test-all

@antoninbas antoninbas merged commit f1564e8 into antrea-io:release-2.0 May 22, 2024
51 of 54 checks passed
@antoninbas antoninbas deleted the automated-cherry-pick-of-#6334-upstream-release-2.0 branch May 22, 2024 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/cherry-pick Categorizes issue or PR as related to the cherry-pick of a bug fix from the main branch to a release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants