Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trigger new build to fix CVE-2024-41110 #37

Closed
althaser opened this issue Jul 30, 2024 · 2 comments
Closed

Trigger new build to fix CVE-2024-41110 #37

althaser opened this issue Jul 30, 2024 · 2 comments
Assignees
Labels

Comments

@althaser
Copy link

Due to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110 vulnerability there is a need to trigger a new build to update the docker packages that fixes this vulnerability.

GHSA-v23v-6jw2-98fq

https://docs.docker.com/engine/release-notes/27.1/

thanks

@tlex tlex self-assigned this Jul 30, 2024
@tlex
Copy link
Member

tlex commented Jul 30, 2024

Thanks for reporting this.

While swarm-launcher isn't affected by an API CVE, I'm releasing now v0.20.2 as a rebuild of v0.20.1.

@tlex tlex closed this as completed Jul 30, 2024
@tlex tlex added the security label Jul 30, 2024
@tlex
Copy link
Member

tlex commented Jul 31, 2024

I have triggered another release v0.20.3 with build cache switched off.

docker run --rm -it --entrypoint "" ixdotai/swarm-launcher:v0.20.3 bash -c "apk update; apk list docker-cli"
Unable to find image 'ixdotai/swarm-launcher:v0.20.3' locally
v0.20.3: Pulling from ixdotai/swarm-launcher
c6a83fedfae6: Already exists 
488e29d71402: Pull complete 
4be6689f44b6: Pull complete 
Digest: sha256:28516bcd90290873d1dda3adfc732141f73e46f5ca65f349cfff97a44b90cb78
Status: Downloaded newer image for ixdotai/swarm-launcher:v0.20.3
fetch https://dl-cdn.alpinelinux.org/alpine/v3.20/main/x86_64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.20/community/x86_64/APKINDEX.tar.gz
v3.20.2-42-g5b0740b11a1 [https://dl-cdn.alpinelinux.org/alpine/v3.20/main]
v3.20.2-43-g4fdd3a681b2 [https://dl-cdn.alpinelinux.org/alpine/v3.20/community]
OK: 24154 distinct packages available
docker-cli-26.1.5-r0 x86_64 {docker} (Apache-2.0) [installed]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants