Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Base Images for Security Vulnerability #4223

Merged

Conversation

yophilav
Copy link
Contributor

@yophilav yophilav commented Jan 13, 2021

Updating Base Images for Security Vulnerability:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723

List of Update Base Images:

  • Linux AMD64 : 3.1.4-alpine3.11 --> 3.1.11-alpine3.12
  • Linux ARM32 & ARM64 : 3.1.10-bionic-arm* --> 3.1.11-bionic-arm*
  • Windows AMD64 : 3.1.10-nanoserver-1809 --> 3.1.11-nanoserver-1809
  • Windows ARM32 : nanoserver:1809-arm32v7 (latest)

Publishing ARM Base Images:
1.0.5.7-linux-arm*

Note to Reviewer:
Please feel free to pull the branch down to your local machine and use your favorite editor's regex to make sure the base images are updated correctly. (I wish there is an easier way to do this).

yophilav and others added 14 commits November 30, 2020 11:32
Currently the `ValidateMetrics` parses [metric readme page](https://github.com/Azure/iotedge/blob/master/doc/BuiltInMetrics.md) to obtain all the metric keys. The test then deploy the system runtime modules and populate its metrics which then are compared against the parsed-document set.
There are a handful of not-so-positive metrics that are not being populated if the system modules operated on a happy path during the E2E test. These not-so-positive metrics are currently causing the `ValidateMetrics` to fail since they are not being populated.
Copy link
Contributor

@dylanbronson dylanbronson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Checked out pr and didn't find old images. LGTM

@yophilav
Copy link
Contributor Author

Thank you for the approval. I'm waiting for the publication of WinIoT ARM32 to be done before I merge the PR.

@kodiakhq kodiakhq bot merged commit 8bd0ab5 into Azure:release/1.0.10 Jan 14, 2021
yophilav added a commit to yophilav/iotedge that referenced this pull request Jan 14, 2021
Updating Base Images for Security Vulnerability:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723

List of Update Base Images:
- Linux AMD64 :  3.1.4-alpine3.11 --> 3.1.11-alpine3.12
- Linux ARM32 & ARM64 : 3.1.10-bionic-arm* --> 3.1.11-bionic-arm*
- Windows AMD64 : 3.1.10-nanoserver-1809 --> 3.1.11-nanoserver-1809
- Windows ARM32 : nanoserver:1809-arm32v7 (latest)

Publishing ARM Base Images:
1.0.5.7-linux-arm*

Note to Reviewer: 
Please feel free to pull the branch down to your local machine and use your favorite editor's regex to make sure the base images are updated correctly. (I wish there is an easier way to do this).
kodiakhq bot pushed a commit that referenced this pull request Jan 14, 2021
Updating Base Images for Security Vulnerability:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723

List of Update Base Images:
- Linux AMD64 :  3.1.4-alpine3.11 --> 3.1.11-alpine3.12
- Linux ARM32 & ARM64 : 3.1.10-bionic-arm* --> 3.1.11-bionic-arm*
- Windows AMD64 : 3.1.10-nanoserver-1809 --> 3.1.11-nanoserver-1809
- Windows ARM32 : nanoserver:1809-arm32v7 (latest)

Publishing ARM Base Images:
1.0.5.7-linux-arm*

Note to Reviewer: 
Please feel free to pull the branch down to your local machine and use your favorite editor's regex to make sure the base images are updated correctly. (I wish there is an easier way to do this).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants