Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

kube-fluentd-operator/1.18.2-r7: cve remediation #18706

Merged

Conversation

cpanato
Copy link
Member

@cpanato cpanato commented May 7, 2024

Fixes:

Related:

Pre-review Checklist

For new package PRs only

  • This PR is marked as fixing a pre-existing package request bug
    • Alternatively, the PR is marked as related to a pre-existing package request bug, such as a dependency
  • REQUIRED - The package is available under an OSI-approved or FSF-approved license
  • REQUIRED - The version of the package is still receiving security updates
  • This PR links to the upstream project's support policy (e.g. endoflife.date)

For new version streams

  • The upstream project actually supports multiple concurrent versions.
  • Any subpackages include the version string in their package name (e.g. name: ${{package.name}}-compat)
  • The package (and subpackages) provides: logical unversioned forms of the package (e.g. nodejs, nodejs-lts)

For security-related PRs

  • The security fix is recorded in the advisories repo

For version bump PRs

  • The epoch field is reset to 0

For PRs that add patches

  • Patch source is documented

Copy link
Contributor

github-actions bot commented May 7, 2024

Package kube-fluentd-operator-compat: Click to expand/collapse

Package kube-fluentd-operator-compat:
Unchanged

Package kube-fluentd-operator: Click to expand/collapse

Package kube-fluentd-operator:
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.8/bigdecimal.so
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.8/gem.build_complete
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.8/gem_make.out
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.8/mkmf.log
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/LICENSE
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/bigdecimal.gemspec
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/Makefile
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/bigdecimal.c
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/bigdecimal.h
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/bits.h
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/extconf.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/feature.h
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/missing/dtoa.c
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/missing.c
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/missing.h
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/static_assert.h
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal/jacobian.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal/ludcmp.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal/math.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal/newton.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal/util.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/lib/bigdecimal.so
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/sample/linear.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/sample/nlsolve.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/sample/pi.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/MIT-LICENSE
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/README.md
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/base.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cache.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cache_file.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cascade.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/chain.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/fallbacks.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/flatten.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/gettext.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/interpolation_compiler.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/key_value.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/lazy_loadable.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/memoize.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/metadata.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/pluralization.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/simple.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/transliterator.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/config.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/exceptions.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/gettext/helpers.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/gettext/po_parser.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/gettext.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/interpolate/ruby.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/fallbacks.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/tag/parents.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/tag/rfc4646.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/tag/simple.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/tag.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/middleware.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/basics.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/defaults.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/interpolation.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/link.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/localization/date.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/localization/date_time.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/localization/procs.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/localization/time.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/localization.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/lookup.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/pluralization.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/procs.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/utils.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/version.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n.rb
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/specifications/bigdecimal-3.1.8.gemspec
Added: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/specifications/i18n-1.14.5.gemspec
Modified: /usr/bin/config-reloader
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bson-4.15.0/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/cool.io-1.8.0/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/ffi-1.15.5/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/http_parser.rb-0.8.0/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/msgpack-1.7.2/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/oj-3.13.23/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/rbtree-0.4.6/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/rbtree-0.4.6/mkmf.log
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/strptime-0.2.5/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/unf_ext-0.0.8.2/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/yajl-ruby-1.4.3/gem_make.out
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bson-4.15.0/ext/bson/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/cool.io-1.8.0/ext/cool.io/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/cool.io-1.8.0/ext/iobuffer/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc12_3gpp/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc15/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_ccitt/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_dnp/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_genibus/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_kermit/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_modbus/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_usb/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_x_25/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_xmodem/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc16_zmodem/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc24/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32_bzip2/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32_jam/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32_mpeg/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32_posix/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32_xfer/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc32c/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc5/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc64/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc64_jones/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc64_xz/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc8/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/digest-crc-0.6.5/ext/digest/crc8_1wire/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/ffi-1.15.5/ext/ffi_c/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/http_parser.rb-0.8.0/ext/ruby_http_parser/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/msgpack-1.7.2/ext/msgpack/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/oj-3.13.23/ext/oj/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/rbtree-0.4.6/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/strptime-0.2.5/ext/strptime/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/unf_ext-0.0.8.2/ext/unf_ext/Makefile
Modified: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/yajl-ruby-1.4.3/ext/yajl/Makefile
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.7/bigdecimal.so
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.7/gem.build_complete
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.7/gem_make.out
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/extensions/x86_64-linux-gnu/3.2.0/bigdecimal-3.1.7/mkmf.log
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/LICENSE
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/bigdecimal.gemspec
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/Makefile
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/bigdecimal.c
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/bigdecimal.h
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/bits.h
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/extconf.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/feature.h
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/missing/dtoa.c
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/missing.c
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/missing.h
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/static_assert.h
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal/jacobian.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal/ludcmp.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal/math.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal/newton.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal/util.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/lib/bigdecimal.so
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/sample/linear.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/sample/nlsolve.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/sample/pi.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/MIT-LICENSE
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/README.md
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/base.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cache.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cache_file.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cascade.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/chain.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/fallbacks.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/flatten.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/gettext.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/interpolation_compiler.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/key_value.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/lazy_loadable.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/memoize.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/metadata.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/pluralization.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/simple.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/transliterator.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/config.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/exceptions.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/gettext/helpers.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/gettext/po_parser.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/gettext.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/interpolate/ruby.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/fallbacks.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/tag/parents.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/tag/rfc4646.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/tag/simple.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/tag.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/middleware.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/basics.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/defaults.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/interpolation.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/link.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/localization/date.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/localization/date_time.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/localization/procs.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/localization/time.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/localization.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/lookup.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/pluralization.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/procs.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/utils.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/version.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n.rb
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/specifications/bigdecimal-3.1.7.gemspec
Deleted: /usr/lib/ruby/gems/3.2.0/ruby/3.2.0/specifications/i18n-1.14.4.gemspec

Package kube-fluentd-operator-oci-entrypoint: Click to expand/collapse

Package kube-fluentd-operator-oci-entrypoint:
Unchanged

Package kube-fluentd-operator-default-config: Click to expand/collapse

Package kube-fluentd-operator-default-config:
Unchanged

bincapz found differences: Click to expand/collapse

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/tests/interpolation.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM techniques/code_eval evaluate code dynamically using eval() eval("

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cache.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM builtin/openssl this binary includes OpenSSL source code OpenSSL/
-LOW ref/site/url contains embedded HTTPS URLs https://ruby-doc.org/stdlib/libdoc/openssl/rdoc/OpenSSL/Digest.html
https://www.ruby-doc.org/core/classes/Object.html

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/pluralization.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs ruby-i18n/i18n#629
https://unicode-org.github.io/cldr/ldml/tr35-numbers.html

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/sample/linear.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/program executes external programs system(
-MEDIUM ref/path/usr/local path reference within /usr/local/bin /usr/local/bin/ruby

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/interpolate/ruby.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://github.com/mutoh/gettext/blob/f6566738b981fe0952548c421042ad1e0cd

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/cascade.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://github.com/clemens/i18n-cascading-backend

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/sample/pi.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM ref/path/usr/local path reference within /usr/local/bin /usr/local/bin/ruby

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/backend/base.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW encoding/json/decode decodes JSON messages JSON.parse

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/bigdecimal.c [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://docs.ruby-lang.org/en/master/BigDecimal.html
https://github.com/flori/json

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/ext/bigdecimal/missing/dtoa.c [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/shell_command execute a shell command system

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.7/sample/nlsolve.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM ref/path/usr/local path reference within /usr/local/bin /usr/local/bin/ruby

Deleted: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.4/lib/i18n/locale/tag/rfc4646.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTP URLs http://en.wikipedia.org/wiki/IETF_language_tag

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cache.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM builtin/openssl this binary includes OpenSSL source code OpenSSL/
+LOW ref/site/url contains embedded HTTPS URLs https://ruby-doc.org/stdlib/libdoc/openssl/rdoc/OpenSSL/Digest.html
https://www.ruby-doc.org/core/classes/Object.html

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/tests/interpolation.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM techniques/code_eval evaluate code dynamically using eval() eval("

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/cascade.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://github.com/clemens/i18n-cascading-backend

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/locale/tag/rfc4646.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://en.wikipedia.org/wiki/IETF_language_tag

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/missing/dtoa.c [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/shell_command execute a shell command system

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/pluralization.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs ruby-i18n/i18n#629
https://unicode-org.github.io/cldr/ldml/tr35-numbers.html

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/backend/base.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW encoding/json/decode decodes JSON messages JSON.parse

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/sample/nlsolve.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/usr/local path reference within /usr/local/bin /usr/local/bin/ruby

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/ext/bigdecimal/bigdecimal.c [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://docs.ruby-lang.org/en/master/BigDecimal.html
https://github.com/flori/json

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/sample/pi.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM ref/path/usr/local path reference within /usr/local/bin /usr/local/bin/ruby

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bigdecimal-3.1.8/sample/linear.rb [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/program executes external programs system(
+MEDIUM ref/path/usr/local path reference within /usr/local/bin /usr/local/bin/ruby

Added: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/i18n-1.14.5/lib/i18n/interpolate/ruby.rb [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://github.com/mutoh/gettext/blob/f6566738b981fe0952548c421042ad1e0cd

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/file_v1beta1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/fluent-plugin-elasticsearch-5.3.0/test/plugin/test_out_elasticsearch_dynamic.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/systemd-journal-1.4.2/lib/systemd/journal/filterable.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/container_v1beta1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/compute_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/fluentd-1.16.1/test/plugin/test_out_file.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/displayvideo_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/servicecontrol_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/systemd-journal-1.4.2/examples/ssh_watcher.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/compute_beta/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/fluent-plugin-elasticsearch-5.3.0/test/plugin/test_out_elasticsearch.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/analyticsreporting_v4/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/systemd-journal-1.4.2/README.md

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-cloud-logging-v2-0.11.0/proto_docs/google/logging/type/http_request.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/memcache_v1beta2/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/fluentd-1.16.1/test/plugin/test_out_secondary_file.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/managedidentities_v1alpha1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/bson-4.15.0/spec/shared/shlib/set_env.sh

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/file_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/sheets_v4/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/osconfig_v1beta/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/osconfig_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/managedidentities_v1beta1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/managedidentities_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/http_parser.rb-0.8.0/ext/ruby_http_parser/vendor/http-parser/test.c

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/fluent-plugin-opensearch-1.1.0/test/plugin/test_out_opensearch.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/googleapis-common-protos-types-1.14.0/lib/google/logging/type/http_request_pb.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/http_parser.rb-0.8.0/ext/ruby_http_parser/vendor/http-parser-java/test.c

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/compute_alpha/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/container_v1/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-api-client-0.53.0/generated/google/apis/logging_v2/classes.rb

Changed: kube-fluentd-operator/usr/lib/ruby/gems/3.2.0/ruby/3.2.0/gems/google-cloud-logging-2.3.2/lib/google/cloud/logging/entry/http_request.rb

@cpanato cpanato enabled auto-merge May 7, 2024 11:40
@hectorj2f hectorj2f changed the title kube-fluentd-operator/1.18.2-r7: fix GHSA-4v7x-pqxf-cx7m kube-fluentd-operator/1.18.2-r7: cve remediation May 7, 2024
@cpanato cpanato merged commit b5b55ac into main May 7, 2024
8 checks passed
@cpanato cpanato deleted the cve-kube-fluentd-operator-70032e58d0ffaeda85fc0a920d74c502 branch May 7, 2024 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants