kubernetes-dns-node-cache/1.23.0-r6: cve remediation

[octo-sts]

kubernetes-dns-node-cache/1.23.0-r6: fix GHSA-m9w6-wp3h-vq8g

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/kubernetes-dns-node-cache.advisories.yaml

[github-actions]

Package kubernetes-dns-node-cache: Click to expand/collapse

Package kubernetes-dns-node-cache:

.PKGINFO metadata:

  (
  	"""
- 	# Generated by melange v0.16.7-22-gfe8b68a
+ 	# Generated by melange v0.7.0-12-g436f915
  	pkgname = kubernetes-dns-node-cache
- 	pkgver = 1.23.0-r6
+ 	pkgver = 1.23.0-r7
  	arch = x86_64
- 	size = 35286265
+ 	size = 37020376
  	origin = kubernetes-dns-node-cache
  	pkgdesc = NodeLocal DNSCache improves Cluster DNS performance by running a DNS caching agent on cluster nodes as a DaemonSet.
  	url = 
- 	commit = 195e878a09b405990e60a29403b57848e9f3104c
- 	builddate = 1715344811
+ 	commit = 5b1a9a9560d85683ba4a03b1c7f65e4bdec22de5
  	license = Apache-2.0
- 	provides = cmd:node-cache=1.23.0-r6
- 	datahash = 860756096795d4714ed7e4c4630f383912061d3cd602e5a6f793e3009586920f
+ 	provides = cmd:node-cache=1.23.0-r7
+ 	datahash = 2d2210dd6c29137937bab6ec66f46d7ca5bab867aa6eade3cc6f76f756938fa7
  	"""
  )

Modified: /usr/bin/node-cache

bincapz found differences: Click to expand/collapse

Changed: kubernetes-dns-node-cache/usr/bin/node-cache

4 new behaviors

RISK	KEY	DESCRIPTION	EVIDENCE
+MEDIUM	databases/leveldb	accesses LevelDB databases	goleveldbruntime v4LevelDBNegroniv1
+MEDIUM	net/http/server	serves HTTP requests	gin-gonic/
+LOW	cloud/google/metadata	Includes the token required to use the Google Cloud Platform metadata server	Metadata-Flavor
+LOW	net/ip	access the internet	invalid packet

2 removed behaviors

RISK	KEY	DESCRIPTION	EVIDENCE
-MEDIUM	3P/threat_hunting/gobfuscate	references 'gobfuscate' tool, by @mthcht	gObfuscate
-MEDIUM	ref/site/http/dynamic	URL that is dynamically generated	http://%s/infotrace http://%s/v0.4/tracesreason http://%s/v0.6/statsx509usefallbackrootsresourceVersionMatchAllowWatchBoo