Fix CVE-2023-4911 in vendor packages (#2009)

* fix CVE-2023-4911 in vendor packages * update scan images
astronomer · Oct 5, 2023 · 758ca9d · 758ca9d
1 parent ddfbd61
commit 758ca9d
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 9 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -378,7 +378,7 @@ workflows:
                 - quay.io/astronomer/ap-astro-ui:0.33.4
                 - quay.io/astronomer/ap-auth-sidecar:1.25.2
                 - quay.io/astronomer/ap-awsesproxy:1.5
-                - quay.io/astronomer/ap-base:3.18.3
+                - quay.io/astronomer/ap-base:3.18.4
                 - quay.io/astronomer/ap-blackbox-exporter:0.24.0-1
                 - quay.io/astronomer/ap-cli-install:0.26.18
                 - quay.io/astronomer/ap-commander:0.33.2
@@ -388,11 +388,11 @@ workflows:
                 - quay.io/astronomer/ap-default-backend:0.28.19
                 - quay.io/astronomer/ap-elasticsearch-exporter:1.6.0
                 - quay.io/astronomer/ap-elasticsearch:8.8.2
-                - quay.io/astronomer/ap-fluentd:1.16.2
+                - quay.io/astronomer/ap-fluentd:1.16.2-1
                 - quay.io/astronomer/ap-grafana:10.0.2
                 - quay.io/astronomer/ap-houston-api:0.33.5
                 - quay.io/astronomer/ap-init:3.18.3
-                - quay.io/astronomer/ap-init:3.18.3-1
+                - quay.io/astronomer/ap-init:3.18.4
                 - quay.io/astronomer/ap-kibana:8.8.2
                 - quay.io/astronomer/ap-kube-state:2.8.2
                 - quay.io/astronomer/ap-nats-exporter:0.10.0-6
@@ -418,7 +418,7 @@ workflows:
                 - quay.io/astronomer/ap-astro-ui:0.33.4
                 - quay.io/astronomer/ap-auth-sidecar:1.25.2
                 - quay.io/astronomer/ap-awsesproxy:1.5
-                - quay.io/astronomer/ap-base:3.18.3
+                - quay.io/astronomer/ap-base:3.18.4
                 - quay.io/astronomer/ap-blackbox-exporter:0.24.0-1
                 - quay.io/astronomer/ap-cli-install:0.26.18
                 - quay.io/astronomer/ap-commander:0.33.2
@@ -428,11 +428,11 @@ workflows:
                 - quay.io/astronomer/ap-default-backend:0.28.19
                 - quay.io/astronomer/ap-elasticsearch-exporter:1.6.0
                 - quay.io/astronomer/ap-elasticsearch:8.8.2
-                - quay.io/astronomer/ap-fluentd:1.16.2
+                - quay.io/astronomer/ap-fluentd:1.16.2-1
                 - quay.io/astronomer/ap-grafana:10.0.2
                 - quay.io/astronomer/ap-houston-api:0.33.5
                 - quay.io/astronomer/ap-init:3.18.3
-                - quay.io/astronomer/ap-init:3.18.3-1
+                - quay.io/astronomer/ap-init:3.18.4
                 - quay.io/astronomer/ap-kibana:8.8.2
                 - quay.io/astronomer/ap-kube-state:2.8.2
                 - quay.io/astronomer/ap-nats-exporter:0.10.0-6

diff --git a/charts/elasticsearch/values.yaml b/charts/elasticsearch/values.yaml
@@ -14,7 +14,7 @@ images:
     pullPolicy: IfNotPresent
   init:
     repository: quay.io/astronomer/ap-base # needs root permissions for sysctl changes
-    tag: 3.18.3
+    tag: 3.18.4
     pullPolicy: IfNotPresent
   curator:
     repository: quay.io/astronomer/ap-curator

diff --git a/charts/fluentd/values.yaml b/charts/fluentd/values.yaml
@@ -9,7 +9,7 @@ container:
 images:
   fluentd:
     repository: quay.io/astronomer/ap-fluentd
-    tag: 1.16.2
+    tag: 1.16.2-1
     pullPolicy: IfNotPresent
 
 elasticsearch:

diff --git a/charts/kibana/values.yaml b/charts/kibana/values.yaml
@@ -9,7 +9,7 @@ images:
     pullPolicy: IfNotPresent
   init:
     repository: quay.io/astronomer/ap-init
-    tag: 3.18.3-1
+    tag: 3.18.4
     pullPolicy: IfNotPresent
 
 securityContext: