diff --git a/charts/core/prometheus/CHANGELOG.md b/charts/core/prometheus/CHANGELOG.md index ad9fd5acef9..5c86d215614 100644 --- a/charts/core/prometheus/CHANGELOG.md +++ b/charts/core/prometheus/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [prometheus-1.1.59](https://github.com/truecharts/apps/compare/uptimerobot-prometheus-2.0.19...prometheus-1.1.59) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [prometheus-1.1.58](https://github.com/truecharts/apps/compare/uptimerobot-prometheus-2.0.18...prometheus-1.1.58) (2022-02-06) diff --git a/charts/core/prometheus/helm-values.md b/charts/core/prometheus/helm-values.md index acfe45ed107..a4acdd9fc5a 100644 --- a/charts/core/prometheus/helm-values.md +++ b/charts/core/prometheus/helm-values.md @@ -317,7 +317,7 @@ You will, however, be able to use all values referenced in the common chart here | prometheus.volumes | list | `[]` | | | prometheus.walCompression | bool | `false` | | | prometheusImage.repository | string | `"tccr.io/truecharts/prometheus"` | | -| prometheusImage.tag | string | `"v2.33.1@sha256:01824bbd6e3c481220b16be22a880033eb6b6568ee405609d6eefa9844125560"` | | +| prometheusImage.tag | string | `"v2.33.1@sha256:e3007669fc7f19029c26d4dec8bcc3c73cbec6fcfe09edaad24b1fd10f1ecf2a"` | | | rbac | object | `{"enabled":true,"rules":[{"apiGroups":["apiextensions.k8s.io"],"resources":["customresourcedefinitions"],"verbs":["create"]},{"apiGroups":["apiextensions.k8s.io"],"resourceNames":["alertmanagers.monitoring.coreos.com","podmonitors.monitoring.coreos.com","prometheuses.monitoring.coreos.com","prometheusrules.monitoring.coreos.com","servicemonitors.monitoring.coreos.com","thanosrulers.monitoring.coreos.com","probes.monitoring.coreos.com"],"resources":["customresourcedefinitions"],"verbs":["get","update"]},{"apiGroups":["monitoring.coreos.com"],"resources":["alertmanagers","alertmanagers/finalizers","alertmanagerconfigs","prometheuses","prometheuses/finalizers","thanosrulers","thanosrulers/finalizers","servicemonitors","podmonitors","probes","prometheusrules"],"verbs":["*"]},{"apiGroups":["apps"],"resources":["statefulsets"],"verbs":["*"]},{"apiGroups":[""],"resources":["configmaps","secrets"],"verbs":["*"]},{"apiGroups":[""],"resources":["pods"],"verbs":["list","delete"]},{"apiGroups":[""],"resources":["services","services/finalizers","endpoints"],"verbs":["get","create","update","delete"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["get","list","watch"]},{"apiGroups":["networking.k8s.io"],"resources":["ingresses"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | | securityContext.readOnlyRootFilesystem | bool | `false` | | | service.alertmanager.enabled | bool | `true` | | diff --git a/charts/dependency/postgresql/CHANGELOG.md b/charts/dependency/postgresql/CHANGELOG.md index 83bd0319cd3..7fc997d6792 100644 --- a/charts/dependency/postgresql/CHANGELOG.md +++ b/charts/dependency/postgresql/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [postgresql-6.0.64](https://github.com/truecharts/apps/compare/postgresql-6.0.63...postgresql-6.0.64) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [postgresql-6.0.63](https://github.com/truecharts/apps/compare/postgresql-6.0.62...postgresql-6.0.63) (2022-02-06) diff --git a/charts/dependency/postgresql/helm-values.md b/charts/dependency/postgresql/helm-values.md index 13193168c46..93d42e3541c 100644 --- a/charts/dependency/postgresql/helm-values.md +++ b/charts/dependency/postgresql/helm-values.md @@ -28,7 +28,7 @@ You will, however, be able to use all values referenced in the common chart here | existingSecret | string | `""` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"ghcr.io/truecharts/postgresql"` | | -| image.tag | string | `"v14.1.0@sha256:6a65ba0081b1a9936b1e28a3605a29b47a9cfe13dc367046dc3bcb5446c0b441"` | | +| image.tag | string | `"v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe"` | | | podSecurityContext.runAsGroup | int | `0` | | | postgrespassword | string | `"testroot"` | | | postgresqlDatabase | string | `"test"` | | diff --git a/charts/dependency/postgresql/security.md b/charts/dependency/postgresql/security.md index 173566b500e..5c8e1f26edb 100644 --- a/charts/dependency/postgresql/security.md +++ b/charts/dependency/postgresql/security.md @@ -44,7 +44,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/postgresql:v14.1.0@sha256:6a65ba0081b1a9936b1e28a3605a29b47a9cfe13dc367046dc3bcb5446c0b441 + tccr.io/truecharts/postgresql:v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe ##### Scan Results @@ -113,7 +113,7 @@ hide: | ssl_client | CVE-2021-42375 | MEDIUM | 1.33.1-r3 | 1.33.1-r5 |
Expand...https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
| -#### Container: tccr.io/truecharts/postgresql:v14.1.0@sha256:6a65ba0081b1a9936b1e28a3605a29b47a9cfe13dc367046dc3bcb5446c0b441 (debian 10.11) +#### Container: tccr.io/truecharts/postgresql:v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe (debian 10.11) **debian** diff --git a/charts/dependency/redis/CHANGELOG.md b/charts/dependency/redis/CHANGELOG.md index 57436e563ff..eec72912c72 100644 --- a/charts/dependency/redis/CHANGELOG.md +++ b/charts/dependency/redis/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [redis-1.0.69](https://github.com/truecharts/apps/compare/redis-1.0.68...redis-1.0.69) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [redis-1.0.68](https://github.com/truecharts/apps/compare/redis-1.0.67...redis-1.0.68) (2022-02-06) diff --git a/charts/dependency/redis/helm-values.md b/charts/dependency/redis/helm-values.md index 12f9ba378f8..d05d6ea12c9 100644 --- a/charts/dependency/redis/helm-values.md +++ b/charts/dependency/redis/helm-values.md @@ -28,7 +28,7 @@ You will, however, be able to use all values referenced in the common chart here | existingSecret | string | `""` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"ghcr.io/truecharts/redis"` | | -| image.tag | string | `"v6.2.6@sha256:b486f7f995114d90bf88948962f6abbfa289960cc989100d8220c71e5726a681"` | | +| image.tag | string | `"v6.2.6@sha256:721b15347b14155e6212585dbebb479fa453a1cc843c0d963b11c21a515568e3"` | | | persistence.redis-health | object | See below | redis-health configmap mount | | persistence.redis-health.mountPath | string | `"/health"` | Where to mount the volume in the main container. Defaults to `/`, setting to '-' creates the volume but disables the volumeMount. | | persistence.redis-health.readOnly | bool | `false` | Specify if the volume should be mounted read-only. | diff --git a/charts/dependency/redis/security.md b/charts/dependency/redis/security.md index 2dc5115321c..c8432d62361 100644 --- a/charts/dependency/redis/security.md +++ b/charts/dependency/redis/security.md @@ -44,7 +44,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/redis:v6.2.6@sha256:b486f7f995114d90bf88948962f6abbfa289960cc989100d8220c71e5726a681 + tccr.io/truecharts/redis:v6.2.6@sha256:721b15347b14155e6212585dbebb479fa453a1cc843c0d963b11c21a515568e3 ##### Scan Results @@ -113,7 +113,7 @@ hide: | ssl_client | CVE-2021-42375 | MEDIUM | 1.33.1-r3 | 1.33.1-r5 |
Expand...https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
| -#### Container: tccr.io/truecharts/redis:v6.2.6@sha256:b486f7f995114d90bf88948962f6abbfa289960cc989100d8220c71e5726a681 (debian 10.11) +#### Container: tccr.io/truecharts/redis:v6.2.6@sha256:721b15347b14155e6212585dbebb479fa453a1cc843c0d963b11c21a515568e3 (debian 10.11) **debian** diff --git a/charts/library/common/CHANGELOG.md b/charts/library/common/CHANGELOG.md index cc30c98890a..5a2ccdb1ce2 100644 --- a/charts/library/common/CHANGELOG.md +++ b/charts/library/common/CHANGELOG.md @@ -1,6 +1,16 @@ # Changelog
+ +### [common-8.15.1](https://github.com/truecharts/apps/compare/common-8.15.0...common-8.15.1) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) +* update docker general non-major ([#1855](https://github.com/truecharts/apps/issues/1855)) + + + ### [common-8.15.0](https://github.com/truecharts/apps/compare/common-8.14.5...common-8.15.0) (2022-02-06) diff --git a/charts/library/common/helm-values.md b/charts/library/common/helm-values.md index 182595438bf..fff04609c17 100644 --- a/charts/library/common/helm-values.md +++ b/charts/library/common/helm-values.md @@ -195,7 +195,7 @@ This chart is used by a lot of our Apps to provide sane defaults and logic. | postgresqlImage | object | See below | postgresql specific configuration | | postgresqlImage.pullPolicy | string | `"IfNotPresent"` | Specify the postgresql image pull policy | | postgresqlImage.repository | string | `"ghcr.io/truecharts/postgresql"` | Specify the postgresql image | -| postgresqlImage.tag | string | `"v14.1.0@sha256:f729127ca5517840f75e3ab107e2b60efe8257b27f2c679e070dffcaf534e88a"` | Specify the postgresql image tag | +| postgresqlImage.tag | string | `"v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe"` | Specify the postgresql image tag | | priorityClassName | string | `nil` | Custom priority class for different treatment by the scheduler | | probes | object | See below | [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) | | probes.liveness | object | See below | Liveness probe configuration | diff --git a/charts/stable/babybuddy/CHANGELOG.md b/charts/stable/babybuddy/CHANGELOG.md index 3998b0512c2..799f398fefc 100644 --- a/charts/stable/babybuddy/CHANGELOG.md +++ b/charts/stable/babybuddy/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [babybuddy-5.0.39](https://github.com/truecharts/apps/compare/babybuddy-5.0.38...babybuddy-5.0.39) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [babybuddy-5.0.38](https://github.com/truecharts/apps/compare/babybuddy-5.0.37...babybuddy-5.0.38) (2022-02-06) diff --git a/charts/stable/babybuddy/helm-values.md b/charts/stable/babybuddy/helm-values.md index 12f63b0cdf8..272bd1e0dc0 100644 --- a/charts/stable/babybuddy/helm-values.md +++ b/charts/stable/babybuddy/helm-values.md @@ -21,7 +21,7 @@ You will, however, be able to use all values referenced in the common chart here | envValueFrom.DB_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"tccr.io/truecharts/babybuddy"` | | -| image.tag | string | `"v1.9.3@sha256:c7f323112a9eca04ab2e7701507af70aa60ae2dc79cdd3e4cc2be66df656b27e"` | | +| image.tag | string | `"v1.9.3@sha256:6fa60f37bc4b5be5d07b05344e7343f15b9103642fc04305dca0d751ca8f4836"` | | | persistence.config.enabled | bool | `true` | | | persistence.config.mountPath | string | `"/config"` | | | persistence.varrun.enabled | bool | `true` | | diff --git a/charts/stable/babybuddy/security.md b/charts/stable/babybuddy/security.md index 5ba8db7ff68..b2fd06496b9 100644 --- a/charts/stable/babybuddy/security.md +++ b/charts/stable/babybuddy/security.md @@ -75,7 +75,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/postgresql:v14.1.0@sha256:f729127ca5517840f75e3ab107e2b60efe8257b27f2c679e070dffcaf534e88a - tccr.io/truecharts/babybuddy:v1.9.3@sha256:c7f323112a9eca04ab2e7701507af70aa60ae2dc79cdd3e4cc2be66df656b27e + tccr.io/truecharts/babybuddy:v1.9.3@sha256:6fa60f37bc4b5be5d07b05344e7343f15b9103642fc04305dca0d751ca8f4836 tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/postgresql:v14.1.0@sha256:f729127ca5517840f75e3ab107e2b60efe8257b27f2c679e070dffcaf534e88a diff --git a/charts/stable/booksonic-air/CHANGELOG.md b/charts/stable/booksonic-air/CHANGELOG.md index 904bd84ff36..007eaf7c25e 100644 --- a/charts/stable/booksonic-air/CHANGELOG.md +++ b/charts/stable/booksonic-air/CHANGELOG.md @@ -1,6 +1,16 @@ # Changelog
+ +### [booksonic-air-4.0.42](https://github.com/truecharts/apps/compare/booksonic-air-4.0.41...booksonic-air-4.0.42) (2022-02-07) + +#### Chore + +* fix links on `Chart.yaml` ([#1862](https://github.com/truecharts/apps/issues/1862)) +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [booksonic-air-4.0.41](https://github.com/truecharts/apps/compare/booksonic-air-4.0.40...booksonic-air-4.0.41) (2022-02-06) diff --git a/charts/stable/booksonic-air/helm-values.md b/charts/stable/booksonic-air/helm-values.md index b48659f3210..91bddefe9d8 100644 --- a/charts/stable/booksonic-air/helm-values.md +++ b/charts/stable/booksonic-air/helm-values.md @@ -15,7 +15,7 @@ You will, however, be able to use all values referenced in the common chart here | env.TZ | string | `"UTC"` | Set the container timezone | | image.pullPolicy | string | `"IfNotPresent"` | image pull policy | | image.repository | string | `"tccr.io/truecharts/booksonic-air"` | image repository | -| image.tag | string | `"v2201.1.0@sha256:0a42076fccb506b8383fa9c811098e7d117ed3d601a62be4656d901cc6ab05ab"` | image tag | +| image.tag | string | `"v2201.1.0@sha256:f98f856134cce6d583d80e98672acae58fc167378567c9495d39c28e6cc1442b"` | image tag | | persistence | object | See values.yaml | Configure persistence settings for the chart under this key. | | podSecurityContext.runAsGroup | int | `0` | | | podSecurityContext.runAsUser | int | `0` | | diff --git a/charts/stable/booksonic-air/security.md b/charts/stable/booksonic-air/security.md index 505eaf62d17..90d219635fe 100644 --- a/charts/stable/booksonic-air/security.md +++ b/charts/stable/booksonic-air/security.md @@ -45,7 +45,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:0a42076fccb506b8383fa9c811098e7d117ed3d601a62be4656d901cc6ab05ab + tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:f98f856134cce6d583d80e98672acae58fc167378567c9495d39c28e6cc1442b ##### Scan Results @@ -114,7 +114,7 @@ hide: | ssl_client | CVE-2021-42375 | MEDIUM | 1.33.1-r3 | 1.33.1-r5 |
Expand...https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
| -#### Container: tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:0a42076fccb506b8383fa9c811098e7d117ed3d601a62be4656d901cc6ab05ab (ubuntu 18.04) +#### Container: tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:f98f856134cce6d583d80e98672acae58fc167378567c9495d39c28e6cc1442b (ubuntu 18.04) **ubuntu** @@ -743,8 +743,7 @@ hide: | locales | CVE-2021-3326 | LOW | 2.27-3ubuntu1.4 | |
Expand...http://www.openwall.com/lists/oss-security/2021/01/28/2
https://bugs.chromium.org/p/project-zero/issues/detail?id=2146
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3326
https://linux.oracle.com/cve/CVE-2021-3326.html
https://linux.oracle.com/errata/ELSA-2021-9344.html
https://security.netapp.com/advisory/ntap-20210304-0007/
https://sourceware.org/bugzilla/show_bug.cgi?id=27256
https://sourceware.org/git/?p=glibc.git;a=commit;h=7d88c6142c6efc160c0ee5e4f85cde382c072888
https://sourceware.org/pipermail/libc-alpha/2021-January/122058.html
| | locales | CVE-2021-33574 | LOW | 2.27-3ubuntu1.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33574
https://linux.oracle.com/cve/CVE-2021-33574.html
https://linux.oracle.com/errata/ELSA-2021-9560.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/
https://security.gentoo.org/glsa/202107-07
https://security.netapp.com/advisory/ntap-20210629-0005/
https://sourceware.org/bugzilla/show_bug.cgi?id=27896
https://sourceware.org/bugzilla/show_bug.cgi?id=27896#c1
| | locales | CVE-2021-35942 | LOW | 2.27-3ubuntu1.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35942
https://linux.oracle.com/cve/CVE-2021-35942.html
https://linux.oracle.com/errata/ELSA-2021-9560.html
https://security.netapp.com/advisory/ntap-20210827-0005/
https://sourceware.org/bugzilla/show_bug.cgi?id=28011
https://sourceware.org/git/?p=glibc.git;a=commit;h=5adda61f62b77384718b4c0d8336ade8f2b4b35c
https://sourceware.org/glibc/wiki/Security%20Exceptions
| -| login | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| -| login | CVE-2018-7169 | LOW | 1:4.5-1ubuntu2 | 1:4.5-1ubuntu2.2 |
Expand...https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169
https://github.com/shadow-maint/shadow/pull/97
https://security.gentoo.org/glsa/201805-09
https://ubuntu.com/security/notices/USN-5254-1
| +| login | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2.2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| | mount | CVE-2021-37600 | LOW | 2.31.1-0.4ubuntu3.7 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://security.netapp.com/advisory/ntap-20210902-0002/
| | multiarch-support | CVE-2021-38604 | MEDIUM | 2.27-3ubuntu1.4 | |
Expand...https://blog.tuxcare.com/cve/tuxcare-team-identifies-cve-2021-38604-a-new-vulnerability-in-glibc
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38604
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GYEXYM37RCJWJ6B5KQUYQI4NZBDDYSXP/
https://security.netapp.com/advisory/ntap-20210909-0005/
https://sourceware.org/bugzilla/show_bug.cgi?id=28213
https://sourceware.org/git/?p=glibc.git;a=commit;h=4cc79c217744743077bf7a0ec5e0a4318f1e6641
https://sourceware.org/git/?p=glibc.git;a=commit;h=b805aebd42364fe696e417808a700fdb9800c9e8
| | multiarch-support | CVE-2021-3999 | MEDIUM | 2.27-3ubuntu1.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3999
https://www.openwall.com/lists/oss-security/2022/01/24/4
| @@ -765,8 +764,7 @@ hide: | ncurses-base | CVE-2019-17595 | LOW | 6.1-1ubuntu1.18.04 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17595
https://linux.oracle.com/cve/CVE-2019-17595.html
https://linux.oracle.com/errata/ELSA-2021-4426.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html
https://security.gentoo.org/glsa/202101-28
| | ncurses-bin | CVE-2019-17594 | LOW | 6.1-1ubuntu1.18.04 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17594
https://linux.oracle.com/cve/CVE-2019-17594.html
https://linux.oracle.com/errata/ELSA-2021-4426.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00017.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html
https://security.gentoo.org/glsa/202101-28
| | ncurses-bin | CVE-2019-17595 | LOW | 6.1-1ubuntu1.18.04 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17595
https://linux.oracle.com/cve/CVE-2019-17595.html
https://linux.oracle.com/errata/ELSA-2021-4426.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html
https://security.gentoo.org/glsa/202101-28
| -| passwd | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| -| passwd | CVE-2018-7169 | LOW | 1:4.5-1ubuntu2 | 1:4.5-1ubuntu2.2 |
Expand...https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169
https://github.com/shadow-maint/shadow/pull/97
https://security.gentoo.org/glsa/201805-09
https://ubuntu.com/security/notices/USN-5254-1
| +| passwd | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2.2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| | perl-base | CVE-2020-16156 | MEDIUM | 5.26.1-6ubuntu0.5 | |
Expand...http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156
https://github.com/andk/cpanpm/commit/b27c51adf0fda25dee84cb72cb2b1bf7d832148c
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
https://metacpan.org/pod/distribution/CPAN/scripts/cpan
| | util-linux | CVE-2021-37600 | LOW | 2.31.1-0.4ubuntu3.7 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://security.netapp.com/advisory/ntap-20210902-0002/
| | x11-common | CVE-2012-1093 | LOW | 1:7.7+19ubuntu7.1 | |
Expand...http://vladz.devzero.fr/012_x11-common-vuln.html
http://www.openwall.com/lists/oss-security/2012/02/29/1
http://www.openwall.com/lists/oss-security/2012/03/01/1
https://access.redhat.com/security/cve/cve-2012-1093
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1093
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2012-1093
| diff --git a/charts/stable/medusa/CHANGELOG.md b/charts/stable/medusa/CHANGELOG.md index 8bae5d82bc1..84bcd81bb9b 100644 --- a/charts/stable/medusa/CHANGELOG.md +++ b/charts/stable/medusa/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [medusa-1.0.45](https://github.com/truecharts/apps/compare/medusa-1.0.44...medusa-1.0.45) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [medusa-1.0.44](https://github.com/truecharts/apps/compare/medusa-1.0.43...medusa-1.0.44) (2022-02-06) diff --git a/charts/stable/medusa/helm-values.md b/charts/stable/medusa/helm-values.md index 686872d8754..c222e4b9eba 100644 --- a/charts/stable/medusa/helm-values.md +++ b/charts/stable/medusa/helm-values.md @@ -14,7 +14,7 @@ You will, however, be able to use all values referenced in the common chart here | env.PUID | int | `568` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"tccr.io/truecharts/medusa"` | | -| image.tag | string | `"v0.5.22@sha256:5785a0c88f3115760bf3b8b4dca66ead80f107064581e05f1402b27968835b25"` | | +| image.tag | string | `"v0.5.22@sha256:6f74489499dabede66e481683196ba478bdad116077c9219e043a7c6e05ced07"` | | | persistence.config.enabled | bool | `true` | | | persistence.config.mountPath | string | `"/config"` | | | persistence.varrun.enabled | bool | `true` | | diff --git a/charts/stable/medusa/security.md b/charts/stable/medusa/security.md index dbf54a29f37..e186f99cb4d 100644 --- a/charts/stable/medusa/security.md +++ b/charts/stable/medusa/security.md @@ -45,7 +45,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/medusa:v0.5.22@sha256:5785a0c88f3115760bf3b8b4dca66ead80f107064581e05f1402b27968835b25 + tccr.io/truecharts/medusa:v0.5.22@sha256:6f74489499dabede66e481683196ba478bdad116077c9219e043a7c6e05ced07 ##### Scan Results diff --git a/docs/apps/common/helm-values.md b/docs/apps/common/helm-values.md index 182595438bf..fff04609c17 100644 --- a/docs/apps/common/helm-values.md +++ b/docs/apps/common/helm-values.md @@ -195,7 +195,7 @@ This chart is used by a lot of our Apps to provide sane defaults and logic. | postgresqlImage | object | See below | postgresql specific configuration | | postgresqlImage.pullPolicy | string | `"IfNotPresent"` | Specify the postgresql image pull policy | | postgresqlImage.repository | string | `"ghcr.io/truecharts/postgresql"` | Specify the postgresql image | -| postgresqlImage.tag | string | `"v14.1.0@sha256:f729127ca5517840f75e3ab107e2b60efe8257b27f2c679e070dffcaf534e88a"` | Specify the postgresql image tag | +| postgresqlImage.tag | string | `"v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe"` | Specify the postgresql image tag | | priorityClassName | string | `nil` | Custom priority class for different treatment by the scheduler | | probes | object | See below | [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) | | probes.liveness | object | See below | Liveness probe configuration | diff --git a/docs/apps/core/prometheus/CHANGELOG.md b/docs/apps/core/prometheus/CHANGELOG.md index ad9fd5acef9..5c86d215614 100644 --- a/docs/apps/core/prometheus/CHANGELOG.md +++ b/docs/apps/core/prometheus/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [prometheus-1.1.59](https://github.com/truecharts/apps/compare/uptimerobot-prometheus-2.0.19...prometheus-1.1.59) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [prometheus-1.1.58](https://github.com/truecharts/apps/compare/uptimerobot-prometheus-2.0.18...prometheus-1.1.58) (2022-02-06) diff --git a/docs/apps/core/prometheus/helm-values.md b/docs/apps/core/prometheus/helm-values.md index acfe45ed107..a4acdd9fc5a 100644 --- a/docs/apps/core/prometheus/helm-values.md +++ b/docs/apps/core/prometheus/helm-values.md @@ -317,7 +317,7 @@ You will, however, be able to use all values referenced in the common chart here | prometheus.volumes | list | `[]` | | | prometheus.walCompression | bool | `false` | | | prometheusImage.repository | string | `"tccr.io/truecharts/prometheus"` | | -| prometheusImage.tag | string | `"v2.33.1@sha256:01824bbd6e3c481220b16be22a880033eb6b6568ee405609d6eefa9844125560"` | | +| prometheusImage.tag | string | `"v2.33.1@sha256:e3007669fc7f19029c26d4dec8bcc3c73cbec6fcfe09edaad24b1fd10f1ecf2a"` | | | rbac | object | `{"enabled":true,"rules":[{"apiGroups":["apiextensions.k8s.io"],"resources":["customresourcedefinitions"],"verbs":["create"]},{"apiGroups":["apiextensions.k8s.io"],"resourceNames":["alertmanagers.monitoring.coreos.com","podmonitors.monitoring.coreos.com","prometheuses.monitoring.coreos.com","prometheusrules.monitoring.coreos.com","servicemonitors.monitoring.coreos.com","thanosrulers.monitoring.coreos.com","probes.monitoring.coreos.com"],"resources":["customresourcedefinitions"],"verbs":["get","update"]},{"apiGroups":["monitoring.coreos.com"],"resources":["alertmanagers","alertmanagers/finalizers","alertmanagerconfigs","prometheuses","prometheuses/finalizers","thanosrulers","thanosrulers/finalizers","servicemonitors","podmonitors","probes","prometheusrules"],"verbs":["*"]},{"apiGroups":["apps"],"resources":["statefulsets"],"verbs":["*"]},{"apiGroups":[""],"resources":["configmaps","secrets"],"verbs":["*"]},{"apiGroups":[""],"resources":["pods"],"verbs":["list","delete"]},{"apiGroups":[""],"resources":["services","services/finalizers","endpoints"],"verbs":["get","create","update","delete"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["get","list","watch"]},{"apiGroups":["networking.k8s.io"],"resources":["ingresses"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | | securityContext.readOnlyRootFilesystem | bool | `false` | | | service.alertmanager.enabled | bool | `true` | | diff --git a/docs/apps/dependency/postgresql/CHANGELOG.md b/docs/apps/dependency/postgresql/CHANGELOG.md index 83bd0319cd3..7fc997d6792 100644 --- a/docs/apps/dependency/postgresql/CHANGELOG.md +++ b/docs/apps/dependency/postgresql/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [postgresql-6.0.64](https://github.com/truecharts/apps/compare/postgresql-6.0.63...postgresql-6.0.64) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [postgresql-6.0.63](https://github.com/truecharts/apps/compare/postgresql-6.0.62...postgresql-6.0.63) (2022-02-06) diff --git a/docs/apps/dependency/postgresql/helm-values.md b/docs/apps/dependency/postgresql/helm-values.md index 13193168c46..93d42e3541c 100644 --- a/docs/apps/dependency/postgresql/helm-values.md +++ b/docs/apps/dependency/postgresql/helm-values.md @@ -28,7 +28,7 @@ You will, however, be able to use all values referenced in the common chart here | existingSecret | string | `""` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"ghcr.io/truecharts/postgresql"` | | -| image.tag | string | `"v14.1.0@sha256:6a65ba0081b1a9936b1e28a3605a29b47a9cfe13dc367046dc3bcb5446c0b441"` | | +| image.tag | string | `"v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe"` | | | podSecurityContext.runAsGroup | int | `0` | | | postgrespassword | string | `"testroot"` | | | postgresqlDatabase | string | `"test"` | | diff --git a/docs/apps/dependency/postgresql/security.md b/docs/apps/dependency/postgresql/security.md index 173566b500e..5c8e1f26edb 100644 --- a/docs/apps/dependency/postgresql/security.md +++ b/docs/apps/dependency/postgresql/security.md @@ -44,7 +44,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/postgresql:v14.1.0@sha256:6a65ba0081b1a9936b1e28a3605a29b47a9cfe13dc367046dc3bcb5446c0b441 + tccr.io/truecharts/postgresql:v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe ##### Scan Results @@ -113,7 +113,7 @@ hide: | ssl_client | CVE-2021-42375 | MEDIUM | 1.33.1-r3 | 1.33.1-r5 |
Expand...https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
| -#### Container: tccr.io/truecharts/postgresql:v14.1.0@sha256:6a65ba0081b1a9936b1e28a3605a29b47a9cfe13dc367046dc3bcb5446c0b441 (debian 10.11) +#### Container: tccr.io/truecharts/postgresql:v14.1.0@sha256:5d65d8f372e4c8275c1b29e5512ec9762c689c32bf07da2345297ccf38768ebe (debian 10.11) **debian** diff --git a/docs/apps/dependency/redis/CHANGELOG.md b/docs/apps/dependency/redis/CHANGELOG.md index 57436e563ff..eec72912c72 100644 --- a/docs/apps/dependency/redis/CHANGELOG.md +++ b/docs/apps/dependency/redis/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [redis-1.0.69](https://github.com/truecharts/apps/compare/redis-1.0.68...redis-1.0.69) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [redis-1.0.68](https://github.com/truecharts/apps/compare/redis-1.0.67...redis-1.0.68) (2022-02-06) diff --git a/docs/apps/dependency/redis/helm-values.md b/docs/apps/dependency/redis/helm-values.md index 12f9ba378f8..d05d6ea12c9 100644 --- a/docs/apps/dependency/redis/helm-values.md +++ b/docs/apps/dependency/redis/helm-values.md @@ -28,7 +28,7 @@ You will, however, be able to use all values referenced in the common chart here | existingSecret | string | `""` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"ghcr.io/truecharts/redis"` | | -| image.tag | string | `"v6.2.6@sha256:b486f7f995114d90bf88948962f6abbfa289960cc989100d8220c71e5726a681"` | | +| image.tag | string | `"v6.2.6@sha256:721b15347b14155e6212585dbebb479fa453a1cc843c0d963b11c21a515568e3"` | | | persistence.redis-health | object | See below | redis-health configmap mount | | persistence.redis-health.mountPath | string | `"/health"` | Where to mount the volume in the main container. Defaults to `/`, setting to '-' creates the volume but disables the volumeMount. | | persistence.redis-health.readOnly | bool | `false` | Specify if the volume should be mounted read-only. | diff --git a/docs/apps/dependency/redis/security.md b/docs/apps/dependency/redis/security.md index 2dc5115321c..c8432d62361 100644 --- a/docs/apps/dependency/redis/security.md +++ b/docs/apps/dependency/redis/security.md @@ -44,7 +44,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/redis:v6.2.6@sha256:b486f7f995114d90bf88948962f6abbfa289960cc989100d8220c71e5726a681 + tccr.io/truecharts/redis:v6.2.6@sha256:721b15347b14155e6212585dbebb479fa453a1cc843c0d963b11c21a515568e3 ##### Scan Results @@ -113,7 +113,7 @@ hide: | ssl_client | CVE-2021-42375 | MEDIUM | 1.33.1-r3 | 1.33.1-r5 |
Expand...https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
| -#### Container: tccr.io/truecharts/redis:v6.2.6@sha256:b486f7f995114d90bf88948962f6abbfa289960cc989100d8220c71e5726a681 (debian 10.11) +#### Container: tccr.io/truecharts/redis:v6.2.6@sha256:721b15347b14155e6212585dbebb479fa453a1cc843c0d963b11c21a515568e3 (debian 10.11) **debian** diff --git a/docs/apps/games/impostor-server/security.md b/docs/apps/games/impostor-server/security.md index dbefc507104..06ae5987b31 100644 --- a/docs/apps/games/impostor-server/security.md +++ b/docs/apps/games/impostor-server/security.md @@ -12,9 +12,9 @@ hide: ##### Scan Results #### Chart Object: impostor-server/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'inotify' of Deployment 'RELEASE-NAME-impostor-server' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -49,11 +49,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -81,11 +81,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -113,11 +113,11 @@ hide: #### Container: tccr.io/truecharts/impostor-server:v1.6.0@sha256:789dda6ea04417d5a7abb9f0373e53ecab7a2cd7b77fa7fc8d9620d977b0e863 (debian 10.10) - + **debian** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | apt | CVE-2011-3374 | LOW | 1.8.2.3 | |
Expand...https://access.redhat.com/security/cve/cve-2011-3374
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html
https://seclists.org/fulldisclosure/2011/Sep/221
https://security-tracker.debian.org/tracker/CVE-2011-3374
https://snyk.io/vuln/SNYK-LINUX-APT-116518
https://ubuntu.com/security/CVE-2011-3374
| @@ -260,4 +260,3 @@ hide: | tar | CVE-2019-9923 | LOW | 1.30+dfsg-6 | |
Expand...http://git.savannah.gnu.org/cgit/tar.git/commit/?id=cb07844454d8cc9fb21f53ace75975f91185a120
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
http://savannah.gnu.org/bugs/?55369
https://bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9923
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
https://ubuntu.com/security/notices/USN-4692-1
| | tar | CVE-2021-20193 | LOW | 1.30+dfsg-6 | |
Expand...https://bugzilla.redhat.com/show_bug.cgi?id=1917565
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20193
https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777
https://savannah.gnu.org/bugs/?59897
https://security.gentoo.org/glsa/202105-29
| | util-linux | CVE-2021-37600 | LOW | 2.33.1-0.1 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://security.netapp.com/advisory/ntap-20210902-0002/
| - diff --git a/docs/apps/games/valheim/security.md b/docs/apps/games/valheim/security.md index ca8123b07b0..6980c4eecb9 100644 --- a/docs/apps/games/valheim/security.md +++ b/docs/apps/games/valheim/security.md @@ -12,9 +12,9 @@ hide: ##### Scan Results #### Chart Object: valheim/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'inotify' of Deployment 'RELEASE-NAME-valheim' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -51,11 +51,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -83,11 +83,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -115,11 +115,11 @@ hide: #### Container: tccr.io/truecharts/valheim-server:latest@sha256:5a417fb9a880321ab9af1d63b0d7a9d68a5340f61a005265f16d13297c3a5f6d (debian 10.11) - + **debian** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | apt | CVE-2011-3374 | LOW | 1.8.2.3 | |
Expand...https://access.redhat.com/security/cve/cve-2011-3374
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html
https://seclists.org/fulldisclosure/2011/Sep/221
https://security-tracker.debian.org/tracker/CVE-2011-3374
https://snyk.io/vuln/SNYK-LINUX-APT-116518
https://ubuntu.com/security/CVE-2011-3374
| @@ -624,9 +624,6 @@ hide: **python-pkg** - + | No Vulnerabilities found | |:---------------------------------| - - - diff --git a/docs/apps/stable/babybuddy/CHANGELOG.md b/docs/apps/stable/babybuddy/CHANGELOG.md index 3998b0512c2..799f398fefc 100644 --- a/docs/apps/stable/babybuddy/CHANGELOG.md +++ b/docs/apps/stable/babybuddy/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [babybuddy-5.0.39](https://github.com/truecharts/apps/compare/babybuddy-5.0.38...babybuddy-5.0.39) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [babybuddy-5.0.38](https://github.com/truecharts/apps/compare/babybuddy-5.0.37...babybuddy-5.0.38) (2022-02-06) diff --git a/docs/apps/stable/babybuddy/helm-values.md b/docs/apps/stable/babybuddy/helm-values.md index 12f63b0cdf8..272bd1e0dc0 100644 --- a/docs/apps/stable/babybuddy/helm-values.md +++ b/docs/apps/stable/babybuddy/helm-values.md @@ -21,7 +21,7 @@ You will, however, be able to use all values referenced in the common chart here | envValueFrom.DB_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"tccr.io/truecharts/babybuddy"` | | -| image.tag | string | `"v1.9.3@sha256:c7f323112a9eca04ab2e7701507af70aa60ae2dc79cdd3e4cc2be66df656b27e"` | | +| image.tag | string | `"v1.9.3@sha256:6fa60f37bc4b5be5d07b05344e7343f15b9103642fc04305dca0d751ca8f4836"` | | | persistence.config.enabled | bool | `true` | | | persistence.config.mountPath | string | `"/config"` | | | persistence.varrun.enabled | bool | `true` | | diff --git a/docs/apps/stable/babybuddy/security.md b/docs/apps/stable/babybuddy/security.md index 5ba8db7ff68..b2fd06496b9 100644 --- a/docs/apps/stable/babybuddy/security.md +++ b/docs/apps/stable/babybuddy/security.md @@ -75,7 +75,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/postgresql:v14.1.0@sha256:f729127ca5517840f75e3ab107e2b60efe8257b27f2c679e070dffcaf534e88a - tccr.io/truecharts/babybuddy:v1.9.3@sha256:c7f323112a9eca04ab2e7701507af70aa60ae2dc79cdd3e4cc2be66df656b27e + tccr.io/truecharts/babybuddy:v1.9.3@sha256:6fa60f37bc4b5be5d07b05344e7343f15b9103642fc04305dca0d751ca8f4836 tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/postgresql:v14.1.0@sha256:f729127ca5517840f75e3ab107e2b60efe8257b27f2c679e070dffcaf534e88a diff --git a/docs/apps/stable/booksonic-air/CHANGELOG.md b/docs/apps/stable/booksonic-air/CHANGELOG.md index 904bd84ff36..007eaf7c25e 100644 --- a/docs/apps/stable/booksonic-air/CHANGELOG.md +++ b/docs/apps/stable/booksonic-air/CHANGELOG.md @@ -1,6 +1,16 @@ # Changelog
+ +### [booksonic-air-4.0.42](https://github.com/truecharts/apps/compare/booksonic-air-4.0.41...booksonic-air-4.0.42) (2022-02-07) + +#### Chore + +* fix links on `Chart.yaml` ([#1862](https://github.com/truecharts/apps/issues/1862)) +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [booksonic-air-4.0.41](https://github.com/truecharts/apps/compare/booksonic-air-4.0.40...booksonic-air-4.0.41) (2022-02-06) diff --git a/docs/apps/stable/booksonic-air/helm-values.md b/docs/apps/stable/booksonic-air/helm-values.md index b48659f3210..91bddefe9d8 100644 --- a/docs/apps/stable/booksonic-air/helm-values.md +++ b/docs/apps/stable/booksonic-air/helm-values.md @@ -15,7 +15,7 @@ You will, however, be able to use all values referenced in the common chart here | env.TZ | string | `"UTC"` | Set the container timezone | | image.pullPolicy | string | `"IfNotPresent"` | image pull policy | | image.repository | string | `"tccr.io/truecharts/booksonic-air"` | image repository | -| image.tag | string | `"v2201.1.0@sha256:0a42076fccb506b8383fa9c811098e7d117ed3d601a62be4656d901cc6ab05ab"` | image tag | +| image.tag | string | `"v2201.1.0@sha256:f98f856134cce6d583d80e98672acae58fc167378567c9495d39c28e6cc1442b"` | image tag | | persistence | object | See values.yaml | Configure persistence settings for the chart under this key. | | podSecurityContext.runAsGroup | int | `0` | | | podSecurityContext.runAsUser | int | `0` | | diff --git a/docs/apps/stable/booksonic-air/security.md b/docs/apps/stable/booksonic-air/security.md index 505eaf62d17..90d219635fe 100644 --- a/docs/apps/stable/booksonic-air/security.md +++ b/docs/apps/stable/booksonic-air/security.md @@ -45,7 +45,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:0a42076fccb506b8383fa9c811098e7d117ed3d601a62be4656d901cc6ab05ab + tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:f98f856134cce6d583d80e98672acae58fc167378567c9495d39c28e6cc1442b ##### Scan Results @@ -114,7 +114,7 @@ hide: | ssl_client | CVE-2021-42375 | MEDIUM | 1.33.1-r3 | 1.33.1-r5 |
Expand...https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
| -#### Container: tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:0a42076fccb506b8383fa9c811098e7d117ed3d601a62be4656d901cc6ab05ab (ubuntu 18.04) +#### Container: tccr.io/truecharts/booksonic-air:v2201.1.0@sha256:f98f856134cce6d583d80e98672acae58fc167378567c9495d39c28e6cc1442b (ubuntu 18.04) **ubuntu** @@ -743,8 +743,7 @@ hide: | locales | CVE-2021-3326 | LOW | 2.27-3ubuntu1.4 | |
Expand...http://www.openwall.com/lists/oss-security/2021/01/28/2
https://bugs.chromium.org/p/project-zero/issues/detail?id=2146
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3326
https://linux.oracle.com/cve/CVE-2021-3326.html
https://linux.oracle.com/errata/ELSA-2021-9344.html
https://security.netapp.com/advisory/ntap-20210304-0007/
https://sourceware.org/bugzilla/show_bug.cgi?id=27256
https://sourceware.org/git/?p=glibc.git;a=commit;h=7d88c6142c6efc160c0ee5e4f85cde382c072888
https://sourceware.org/pipermail/libc-alpha/2021-January/122058.html
| | locales | CVE-2021-33574 | LOW | 2.27-3ubuntu1.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33574
https://linux.oracle.com/cve/CVE-2021-33574.html
https://linux.oracle.com/errata/ELSA-2021-9560.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/
https://security.gentoo.org/glsa/202107-07
https://security.netapp.com/advisory/ntap-20210629-0005/
https://sourceware.org/bugzilla/show_bug.cgi?id=27896
https://sourceware.org/bugzilla/show_bug.cgi?id=27896#c1
| | locales | CVE-2021-35942 | LOW | 2.27-3ubuntu1.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35942
https://linux.oracle.com/cve/CVE-2021-35942.html
https://linux.oracle.com/errata/ELSA-2021-9560.html
https://security.netapp.com/advisory/ntap-20210827-0005/
https://sourceware.org/bugzilla/show_bug.cgi?id=28011
https://sourceware.org/git/?p=glibc.git;a=commit;h=5adda61f62b77384718b4c0d8336ade8f2b4b35c
https://sourceware.org/glibc/wiki/Security%20Exceptions
| -| login | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| -| login | CVE-2018-7169 | LOW | 1:4.5-1ubuntu2 | 1:4.5-1ubuntu2.2 |
Expand...https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169
https://github.com/shadow-maint/shadow/pull/97
https://security.gentoo.org/glsa/201805-09
https://ubuntu.com/security/notices/USN-5254-1
| +| login | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2.2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| | mount | CVE-2021-37600 | LOW | 2.31.1-0.4ubuntu3.7 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://security.netapp.com/advisory/ntap-20210902-0002/
| | multiarch-support | CVE-2021-38604 | MEDIUM | 2.27-3ubuntu1.4 | |
Expand...https://blog.tuxcare.com/cve/tuxcare-team-identifies-cve-2021-38604-a-new-vulnerability-in-glibc
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38604
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GYEXYM37RCJWJ6B5KQUYQI4NZBDDYSXP/
https://security.netapp.com/advisory/ntap-20210909-0005/
https://sourceware.org/bugzilla/show_bug.cgi?id=28213
https://sourceware.org/git/?p=glibc.git;a=commit;h=4cc79c217744743077bf7a0ec5e0a4318f1e6641
https://sourceware.org/git/?p=glibc.git;a=commit;h=b805aebd42364fe696e417808a700fdb9800c9e8
| | multiarch-support | CVE-2021-3999 | MEDIUM | 2.27-3ubuntu1.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3999
https://www.openwall.com/lists/oss-security/2022/01/24/4
| @@ -765,8 +764,7 @@ hide: | ncurses-base | CVE-2019-17595 | LOW | 6.1-1ubuntu1.18.04 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17595
https://linux.oracle.com/cve/CVE-2019-17595.html
https://linux.oracle.com/errata/ELSA-2021-4426.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html
https://security.gentoo.org/glsa/202101-28
| | ncurses-bin | CVE-2019-17594 | LOW | 6.1-1ubuntu1.18.04 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17594
https://linux.oracle.com/cve/CVE-2019-17594.html
https://linux.oracle.com/errata/ELSA-2021-4426.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00017.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html
https://security.gentoo.org/glsa/202101-28
| | ncurses-bin | CVE-2019-17595 | LOW | 6.1-1ubuntu1.18.04 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00059.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00061.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17595
https://linux.oracle.com/cve/CVE-2019-17595.html
https://linux.oracle.com/errata/ELSA-2021-4426.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html
https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html
https://security.gentoo.org/glsa/202101-28
| -| passwd | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| -| passwd | CVE-2018-7169 | LOW | 1:4.5-1ubuntu2 | 1:4.5-1ubuntu2.2 |
Expand...https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169
https://github.com/shadow-maint/shadow/pull/97
https://security.gentoo.org/glsa/201805-09
https://ubuntu.com/security/notices/USN-5254-1
| +| passwd | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2.2 | |
Expand...https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| | perl-base | CVE-2020-16156 | MEDIUM | 5.26.1-6ubuntu0.5 | |
Expand...http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156
https://github.com/andk/cpanpm/commit/b27c51adf0fda25dee84cb72cb2b1bf7d832148c
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
https://metacpan.org/pod/distribution/CPAN/scripts/cpan
| | util-linux | CVE-2021-37600 | LOW | 2.31.1-0.4ubuntu3.7 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://security.netapp.com/advisory/ntap-20210902-0002/
| | x11-common | CVE-2012-1093 | LOW | 1:7.7+19ubuntu7.1 | |
Expand...http://vladz.devzero.fr/012_x11-common-vuln.html
http://www.openwall.com/lists/oss-security/2012/02/29/1
http://www.openwall.com/lists/oss-security/2012/03/01/1
https://access.redhat.com/security/cve/cve-2012-1093
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1093
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2012-1093
| diff --git a/docs/apps/stable/medusa/CHANGELOG.md b/docs/apps/stable/medusa/CHANGELOG.md index 8bae5d82bc1..84bcd81bb9b 100644 --- a/docs/apps/stable/medusa/CHANGELOG.md +++ b/docs/apps/stable/medusa/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [medusa-1.0.45](https://github.com/truecharts/apps/compare/medusa-1.0.44...medusa-1.0.45) (2022-02-07) + +#### Chore + +* update docker general non-major ([#1863](https://github.com/truecharts/apps/issues/1863)) + + + ### [medusa-1.0.44](https://github.com/truecharts/apps/compare/medusa-1.0.43...medusa-1.0.44) (2022-02-06) diff --git a/docs/apps/stable/medusa/helm-values.md b/docs/apps/stable/medusa/helm-values.md index 686872d8754..c222e4b9eba 100644 --- a/docs/apps/stable/medusa/helm-values.md +++ b/docs/apps/stable/medusa/helm-values.md @@ -14,7 +14,7 @@ You will, however, be able to use all values referenced in the common chart here | env.PUID | int | `568` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"tccr.io/truecharts/medusa"` | | -| image.tag | string | `"v0.5.22@sha256:5785a0c88f3115760bf3b8b4dca66ead80f107064581e05f1402b27968835b25"` | | +| image.tag | string | `"v0.5.22@sha256:6f74489499dabede66e481683196ba478bdad116077c9219e043a7c6e05ced07"` | | | persistence.config.enabled | bool | `true` | | | persistence.config.mountPath | string | `"/config"` | | | persistence.varrun.enabled | bool | `true` | | diff --git a/docs/apps/stable/medusa/security.md b/docs/apps/stable/medusa/security.md index dbf54a29f37..e186f99cb4d 100644 --- a/docs/apps/stable/medusa/security.md +++ b/docs/apps/stable/medusa/security.md @@ -45,7 +45,7 @@ hide: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c - tccr.io/truecharts/medusa:v0.5.22@sha256:5785a0c88f3115760bf3b8b4dca66ead80f107064581e05f1402b27968835b25 + tccr.io/truecharts/medusa:v0.5.22@sha256:6f74489499dabede66e481683196ba478bdad116077c9219e043a7c6e05ced07 ##### Scan Results diff --git a/docs/index.yaml b/docs/index.yaml index a6c62b31ec8..2c23c48602d 100644 --- a/docs/index.yaml +++ b/docs/index.yaml @@ -1851,6 +1851,46 @@ entries: - https://github.com/truecharts/apps/releases/download/authelia-8.0.13/authelia-8.0.13.tgz version: 8.0.13 babybuddy: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - media + truecharts.org/grade: U + apiVersion: v2 + appVersion: 1.9.3 + created: "2022-02-07T09:38:03.565519327Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 8.15.0 + - condition: postgresql.enabled + name: postgresql + repository: https://truecharts.org/ + version: 6.0.62 + description: Helps caregivers track sleep, feedings, diaper changes, tummy time + and more to learn about and predict baby's needs without (as much) guess work. + digest: 9ab1544c196b4e9d228ace63caf7f767eaed150e049236ec183c299d3d1f83ac + home: https://github.com/truecharts/apps/tree/main/charts/babybuddy + icon: https://truecharts.org/_static/img/appicons/babybuddy-icon.png + keywords: + - baby + - buddy + - tracker + - parents + - parenting + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: babybuddy + sources: + - https://github.com/babybuddy/babybuddy + - https://github.com/nicholaswilde/docker-babybuddy + type: application + urls: + - https://github.com/truecharts/apps/releases/download/babybuddy-5.0.39/babybuddy-5.0.39.tgz + version: 5.0.39 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -3067,6 +3107,38 @@ entries: - https://github.com/truecharts/apps/releases/download/boinc-0.0.1/boinc-0.0.1.tgz version: 0.0.1 booksonic-air: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - media + truecharts.org/grade: U + apiVersion: v2 + appVersion: 2201.1.0 + created: "2022-02-07T09:38:03.754923523Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 8.15.0 + description: Booksonic is a platform for accessing the audibooks you own wherever + you are + digest: 41d769663034e28d66fc14ba4e8419df46b8cbc4abf6e88b49e3b99892c95d8e + home: https://github.com/truecharts/apps/tree/master/charts/stable/booksonic-air + icon: https://truecharts.org/_static/img/appicons/booksonic-air-icon.png + keywords: + - booksonic + - audiobook + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: booksonic-air + sources: + - https://github.com/popeen/Booksonic-Air + - https://hub.docker.com/r/linuxserver/booksonic-air + urls: + - https://github.com/truecharts/apps/releases/download/booksonic-air-4.0.42/booksonic-air-4.0.42.tgz + version: 4.0.42 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -5163,6 +5235,27 @@ entries: - https://github.com/truecharts/apps/releases/download/collabora-online-9.0.20/collabora-online-9.0.20.tgz version: 9.0.20 common: + - apiVersion: v2 + appVersion: latest + created: "2022-02-07T09:38:03.940402898Z" + description: Function library for TrueCharts + digest: 3b93cf5354bfafdcf1a7b5112421e85c69decd14a095e39baf9a229cc7b2ac8c + home: https://github.com/truecharts/apps/tree/master/charts/common + icon: https://avatars.githubusercontent.com/u/76400755 + keywords: + - truecharts + - library-chart + - common + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: common + type: library + urls: + - https://github.com/truecharts/apps/releases/download/common-8.15.1/common-8.15.1.tgz + version: 8.15.1 - apiVersion: v2 appVersion: latest created: "2022-02-06T13:06:29.203530004Z" @@ -26197,6 +26290,42 @@ entries: - https://github.com/truecharts/apps/releases/download/mealie-5.0.0/mealie-5.0.0.tgz version: 5.0.0 medusa: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - media + truecharts.org/grade: U + apiVersion: v2 + appVersion: 0.5.22 + created: "2022-02-07T09:38:04.124203865Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 8.15.0 + description: An automatic Video Library Manager for TV Shows + digest: b8b2b2fc51ade0a72b31e9a0d17c26f2fb8cc3e2a31db67fb970bfb2bcd1fb72 + home: https://github.com/truecharts/apps/tree/master/charts/stable/medusa + icon: https://truecharts.org/_static/img/appicons/medusa-icon.png + keywords: + - medusa + - video + - library + - manager + - tv + - shows + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: medusa + sources: + - https://github.com/linuxserver/docker-medusa + - https://pymedusa.com/ + type: application + urls: + - https://github.com/truecharts/apps/releases/download/medusa-1.0.45/medusa-1.0.45.tgz + version: 1.0.45 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -38408,6 +38537,39 @@ entries: - https://github.com/truecharts/apps/releases/download/podgrab-7.0.20/podgrab-7.0.20.tgz version: 7.0.20 postgresql: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - database + truecharts.org/grade: U + apiVersion: v2 + appVersion: 14.1.0 + created: "2022-02-07T09:38:04.311417949Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 8.15.0 + description: PostgresSQL + digest: 26400705354501130ee7736e73be687aa9f056f7b7216724dcfd4c91cac925d9 + home: https://github.com/truecharts/apps/tree/master/stable/postgres + icon: https://d1q6f0aelx0por.cloudfront.net/product-logos/library-postgres-logo.png + keywords: + - postgres + - postgressql + - dtabase + - sql + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: postgresql + sources: + - https://www.postgresql.org/ + type: application + urls: + - https://github.com/truecharts/apps/releases/download/postgresql-6.0.64/postgresql-6.0.64.tgz + version: 6.0.64 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -40073,6 +40235,48 @@ entries: - https://github.com/truecharts/apps/releases/download/promcord-2.0.0/promcord-2.0.0.tgz version: 2.0.0 prometheus: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - metrics + truecharts.org/grade: U + apiVersion: v2 + appVersion: 0.54.0 + created: "2022-02-07T09:38:04.527100083Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 8.15.0 + - condition: exporters.enabled,exporters.node-exporter.enabled + name: node-exporter + repository: https://charts.bitnami.com/bitnami + version: 2.4.1 + - condition: exporters.enabled,exporters.kube-state-metrics.enabled + name: kube-state-metrics + repository: https://charts.bitnami.com/bitnami + version: 2.2.4 + description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, + and Prometheus rules combined with documentation and scripts to provide easy + to operate end-to-end Kubernetes cluster monitoring with Prometheus using the + Prometheus Operator. + digest: 2466f8d9dd66e4cf1351d7c55501e27460ead45f16e1788008c005d291f5bf5c + home: https://github.com/truecharts/apps/tree/master/charts/stable/prometheus + icon: https://truecharts.org/_static/img/appicons/prometheus-icon.png + keywords: + - metrics + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: prometheus + sources: + - https://github.com/prometheus-community/helm-charts + - https://github.com/prometheus-operator/kube-prometheus + type: application + urls: + - https://github.com/truecharts/apps/releases/download/prometheus-1.1.59/prometheus-1.1.59.tgz + version: 1.1.59 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -45100,6 +45304,40 @@ entries: - https://github.com/truecharts/apps/releases/download/recipes-4.0.16/recipes-4.0.16.tgz version: 4.0.16 redis: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - database + - cache + truecharts.org/grade: U + apiVersion: v2 + appVersion: 6.2.6 + created: "2022-02-07T09:38:04.733568769Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 8.15.0 + description: Open source, advanced key-value store. + digest: 143aa1acf5fba33e3f4cd2d8a28f4f995e0ed9853703934f120d60d4f0b63850 + home: https://github.com/truecharts/apps/tree/master/stable/redis + icon: https://bitnami.com/assets/stacks/redis/img/redis-stack-220x234.png + keywords: + - redis + - keyvalue + - database + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: redis + sources: + - https://github.com/bitnami/bitnami-docker-redis + - http://redis.io/ + type: application + urls: + - https://github.com/truecharts/apps/releases/download/redis-1.0.69/redis-1.0.69.tgz + version: 1.0.69 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -57929,4 +58167,4 @@ entries: urls: - https://github.com/truecharts/apps/releases/download/zwavejs2mqtt-9.0.24/zwavejs2mqtt-9.0.24.tgz version: 9.0.24 -generated: "2022-02-06T18:12:20.124872616Z" +generated: "2022-02-07T09:38:04.738212593Z"