Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit c3afe55

Browse files
committedMar 20, 2024
Add release v2.8.4
1 parent 8c14812 commit c3afe55

File tree

6 files changed

+96
-111
lines changed

6 files changed

+96
-111
lines changed
 

‎CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,9 @@
1+
## Release 2.8.4
2+
3+
The alpine base image used by `weave-kube` and `weave-npc` was upgraded to version 3.19.1 in the previous release. In this version, the default iptables backend is nftables, and the legacy backend is not included. Our scripts and programs assume legacy as the default backend, and change to nft if autodetected, or if we ask for it. So, the build Dockerfile (reweave/build/Dockerfile) was changed to also install the Alpine `iptables-legacy` package , and change the `iptables-{save,restore}` symbolic links to point to the legacy backend by default.
4+
5+
The `weave-kube` and `weave-npc` images can now log traces if the environment WEAVE_DEBUG is set in the manifest.
6+
17
## Release 2.8.3
28

39
The docker API client version, used by the proxy package and the weaveutil command, was bumped from 1.18 to 1.24. As of March 2024, Docker API versions below 1.24 are deprecated. This means that the minimum supported Docker version is now 1.12.0.

‎README.md

Lines changed: 12 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -3,13 +3,13 @@
33
This repository contains a fork of Weave Net, the first product developed by Weaveworks. Since Weaveworks has shut down, this repo aims to continue maintaining Weave Net, and to publish releases regularly.
44

55
[![Go Report Card](https://goreportcard.com/badge/github.com/rajch/weave)](https://goreportcard.com/report/github.com/rajch/weave)
6-
[![Docker Pulls](https://img.shields.io/docker/pulls/rajchaudhuri/weave-kube)](https://hub.docker.com/r/rajchaudhuri/weave-kube)
7-
![GitHub release (latest by date)](https://img.shields.io/github/v/release/rajch/weave?include_prereleases)
8-
[![Unique vulnerability count in all images](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Frajch%2Fweave%2Fmaster%2Freweave%2Fscans%2Fbadge.json&label=Vulnerabilty%20count)](reweave/scans/report.md)
6+
[![Docker Pulls](https://img.shields.io/docker/pulls/rajchaudhuri/weave-kube "Number of times the weave-kube image was pulled from the Docker Hub")](https://hub.docker.com/r/rajchaudhuri/weave-kube)
7+
[![GitHub release (latest by date)](https://img.shields.io/github/v/release/rajch/weave?include_prereleases)](https://github.com/rajch/weave/releases)
8+
[![Unique CVE count in all images](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Frajch%2Fweave%2Fmaster%2Freweave%2Fscans%2Fbadge.json&label=CVE%20count "The number of unique CVEs reported by scanning all images")](reweave/scans/report.md)
99

1010
The history of the ReWeave effort can be found in [HISTORY.md](HISTORY.md).
1111

12-
## Using Weave on Kubernetes
12+
## Using Weave Net on Kubernetes
1313

1414
On a newly created Kubernetes cluster, the Weave Net CNI pluging can be installed by running the following command:
1515

@@ -21,10 +21,16 @@ Replace `v1.28` with the version on Kubernetes on your cluster.
2121

2222
That endpoint is provided by the companion project [weave-endpoint](https://github.com/rajch/weave-endpoint).
2323

24-
## Building Weave
24+
## Using Weave Net in other ways
25+
26+
Please refer to the [documentation](https://rajch.github.io/weave).
27+
28+
## Building Weave Net
2529

2630
Details can be found [here](reweave/BUILDING.md).
2731

2832
## Documentation status
2933

30-
At this point, any information found in directories other than `reweave`, such as `docs` or `site`, should be considered obsolete. In time, those will be updated.
34+
The public documentation that used to exist in the `site` directory has been moved to the `original/site` directory. A new `website` directory has been created, and populated with the content of the `original/site` directory, rearranged and reformatted for being built with Jekyll and published to the GitHub pages site [https://rajch.github.io/weave](https://rajch.github.io/weave).
35+
36+
The documentation will now be maintained and published from the `website` directory exclusively.

‎reweave/CHANGELOG.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,15 @@
22

33
All changes made to the weave net codebase during the reweave effort will be documented in this file.
44

5-
## latest
5+
## 2.8.4
6+
7+
### Changed
8+
9+
* Changed version in `reweave/Makefile` to 2.8.4
10+
* Modified reweave and main CHANGELOG.md
11+
* Modified README.md
12+
13+
## 2.8.4-beta3 (8c148120)
614

715
### Changed
816

@@ -22,8 +30,8 @@ All changes made to the weave net codebase during the reweave effort will be doc
2230
## 2.8.4-beta1 (bcab10a4)
2331

2432
### Changed
25-
* Added tracing The `launch.sh` and `init.sh` scripts if the WEAVE_DEBUG environment variable is set.
26-
* When publishing images, the `:latest` tag is also applied. It will not be applied any more if the tag includes "-beta" anywhere.
33+
* Added tracing to `launch.sh` and `init.sh` scripts if the WEAVE_DEBUG environment variable is set.
34+
* When publishing images, the `:latest` tag is also applied. It will not be applied any more if the published tag includes "-beta" anywhere.
2735

2836
### Fixed
2937

‎reweave/Makefile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
IMAGE_VERSION ?= 2.8.4-beta3
1+
IMAGE_VERSION ?= 2.8.4
22
REGISTRY_USER ?= rajchaudhuri
33

44
ALPINE_BASEIMAGE ?= alpine:3.19.1

‎reweave/scans/badge.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "39", "color": "orange"}
1+
{"schemaVersion": 1, "label": "Vulnerabilty count", "message": "19", "color": "orange"}

‎reweave/scans/report.md

Lines changed: 65 additions & 100 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
# Vulnerability Report
22

33
```
4-
Report date: 2024-03-19
5-
Unique vulnerability count: 39
6-
Images version: 2.8.4-beta2
4+
Report date: 2024-03-20
5+
Unique vulnerability count: 19
6+
Images version: 2.8.4
77
```
88

99
## Scanner Details
@@ -23,115 +23,80 @@ Supported DB Schema: 5
2323

2424
## Vulnerabilities
2525

26-
### weave-kube: (20)
26+
### weave-kube: (19)
2727

2828
```
29-
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
30-
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
31-
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
32-
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
33-
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
34-
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
35-
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
36-
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
37-
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
38-
curl 8.5.0-r0 apk CVE-2024-0853 Medium
39-
google.golang.org/protobuf v1.31.0 1.33.0 go-module GHSA-8r3f-844c-mc37 Medium
40-
libuv 1.47.0-r0 apk CVE-2024-24806 High
41-
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
42-
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
43-
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
44-
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
45-
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
46-
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
47-
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
48-
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
49-
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
50-
```
51-
52-
### weave-npc: (18)
53-
54-
```
55-
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
56-
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
57-
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
58-
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
59-
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
60-
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
61-
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
62-
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
63-
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
64-
google.golang.org/protobuf v1.31.0 1.33.0 go-module GHSA-8r3f-844c-mc37 Medium
65-
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
66-
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
67-
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
68-
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
69-
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
70-
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
71-
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
72-
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
73-
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
74-
```
75-
76-
### weave: (20)
77-
78-
```
79-
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
80-
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
81-
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
82-
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
83-
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
84-
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
85-
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
86-
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
87-
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
88-
curl 8.5.0-r0 apk CVE-2024-0853 Medium
89-
google.golang.org/protobuf v1.31.0 1.33.0 go-module GHSA-8r3f-844c-mc37 Medium
90-
libuv 1.47.0-r0 apk CVE-2024-24806 High
91-
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
92-
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
93-
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
94-
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
95-
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
96-
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
97-
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
98-
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
99-
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
29+
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
30+
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
31+
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
32+
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
33+
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
34+
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
35+
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
36+
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
37+
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
38+
curl 8.5.0-r0 apk CVE-2024-0853 Medium
39+
libuv 1.47.0-r0 apk CVE-2024-24806 High
40+
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
41+
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
42+
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
43+
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
44+
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
45+
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
46+
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
47+
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
48+
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
10049
```
10150

102-
### weaveexec: (20)
51+
### weave-npc: (17)
10352

10453
```
105-
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
106-
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
107-
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
108-
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
109-
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
110-
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
111-
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
112-
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
113-
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
114-
curl 8.5.0-r0 apk CVE-2024-0853 Medium
115-
google.golang.org/protobuf v1.31.0 1.33.0 go-module GHSA-8r3f-844c-mc37 Medium
116-
libuv 1.47.0-r0 apk CVE-2024-24806 High
117-
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
118-
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
119-
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
120-
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
121-
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
122-
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
123-
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
124-
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
125-
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
54+
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
55+
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
56+
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
57+
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
58+
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
59+
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
60+
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
61+
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
62+
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
63+
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
64+
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
65+
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
66+
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
67+
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
68+
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
69+
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
70+
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
71+
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
12672
```
12773

128-
### weavedb: (0)
74+
### weave: (19)
12975

13076
```
131-
No vulnerabilities found
77+
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
78+
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
79+
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
80+
busybox 1.36.1-r15 apk CVE-2023-42364 Medium
81+
busybox 1.36.1-r15 apk CVE-2023-42363 Medium
82+
busybox-binsh 1.36.1-r15 apk CVE-2023-42366 Medium
83+
busybox-binsh 1.36.1-r15 apk CVE-2023-42365 Medium
84+
busybox-binsh 1.36.1-r15 apk CVE-2023-42364 Medium
85+
busybox-binsh 1.36.1-r15 apk CVE-2023-42363 Medium
86+
curl 8.5.0-r0 apk CVE-2024-0853 Medium
87+
libuv 1.47.0-r0 apk CVE-2024-24806 High
88+
ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
89+
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
90+
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
91+
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
92+
stdlib go1.21.6 go-module CVE-2024-24785 Unknown
93+
stdlib go1.21.6 go-module CVE-2024-24784 Unknown
94+
stdlib go1.21.6 go-module CVE-2024-24783 Unknown
95+
stdlib go1.21.6 go-module CVE-2023-45290 Unknown
96+
stdlib go1.21.6 go-module CVE-2023-45289 Unknown
13297
```
13398

134-
### network-tester: (19)
99+
### weaveexec: (19)
135100

136101
```
137102
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY

0 commit comments

Comments
 (0)
Please sign in to comment.