You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@skywalking.apache.org by ke...@apache.org on 2026/04/16 04:18:37 UTC
(skywalking-satellite) branch main updated: cves: bump Go to 1.25.9, pin openssl/musl, bump prometheus to v0.311.2 (#247)
This is an automated email from the ASF dual-hosted git repository.
kezhenxu94 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/skywalking-satellite.git
The following commit(s) were added to refs/heads/main by this push:
new d8151c1 cves: bump Go to 1.25.9, pin openssl/musl, bump prometheus to v0.311.2 (#247)
d8151c1 is described below
commit d8151c147760e2993a4fd583af75c5821c126bb1
Author: tetrate-ci[bot] <52...@users.noreply.github.com>
AuthorDate: Thu Apr 16 09:48:31 2026 +0530
cves: bump Go to 1.25.9, pin openssl/musl, bump prometheus to v0.311.2 (#247)
Fix multiple CVEs:
- CVE-2026-32288 (MEDIUM): stdlib v1.25.8 → 1.25.9+ via Go 1.25.9 base image
- CVE-2026-28387 (LOW): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin
- CVE-2026-31789 (LOW): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin
- CVE-2026-28389 (MEDIUM): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin
- CVE-2026-31790 (HIGH): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin
- CVE-2026-28390 (LOW): openssl 3.3.6-r0 → 3.3.7-r0 via explicit pin
- CVE-2026-40200 (HIGH): musl 1.2.5-r9 → 1.2.5-r11 via explicit pin
- CVE-2026-40179 (MEDIUM): prometheus v0.43.0 → v0.311.2
Changes:
- docker/Dockerfile: bump golang build image from 1.25.8 → 1.25.9
- docker/Dockerfile: add explicit pins libssl3>=3.3.7-r0 libcrypto3>=3.3.7-r0 musl>=1.2.5-r11
- go.mod/go.sum: bump github.com/prometheus/prometheus from v0.43.0 to v0.311.2
- go.mod: update toolchain from go1.25.8 to go1.25.9
- plugins/client/grpc/resolvers/kubernetes_kinds.go: adapt to new
prometheus discovery API (NewDiscoverer/NewDiscovererMetrics pattern)
---
docker/Dockerfile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 3bad8ef..fa376ac 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -32,7 +32,7 @@ FROM alpine:3.23
RUN apk update --no-cache && \
apk upgrade --no-cache && \
- apk add --no-cache ca-certificates
+ apk add --no-cache ca-certificates "libssl3>=3.3.7-r0" "libcrypto3>=3.3.7-r0" "musl>=1.2.5-r11"
VOLUME /skywalking/configs