From 0a739c218766bb790326f752e48605504e6a14ce Mon Sep 17 00:00:00 2001 From: Michael Beaver Date: Mon, 18 Mar 2019 10:27:23 -0500 Subject: [PATCH] Uplift HAProxy to address CVEs The current default version of HAProxy is vulnerable to multiple CVEs: CVE-2018-20102 CVE-2018-20103 CVE-2018-20615 Which HAProxy versions >=1.8.17 addresses Change-Id: I8a387a43976dd105ea3c1dd9b74cd435a8f56864 --- global/software/config/versions.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/global/software/config/versions.yaml b/global/software/config/versions.yaml index 76b2d72a5..4384730b7 100644 --- a/global/software/config/versions.yaml +++ b/global/software/config/versions.yaml @@ -487,7 +487,7 @@ data: etcdctl: quay.io/coreos/etcd:v3.2.18 haproxy: anchor: gcr.io/google_containers/hyperkube-amd64:v1.11.6 - haproxy: docker.io/haproxy:1.8.3 + haproxy: docker.io/haproxy:1.8.19 ingress: {} kubectl: gcr.io/google-containers/hyperkube-amd64:v1.11.6 pause: gcr.io/google-containers/pause-amd64:3.1