diff --git a/charts/incubator/ispy-agent-dvr/CHANGELOG.md b/charts/incubator/ispy-agent-dvr/CHANGELOG.md index 460f49f9fe4..139166f5af1 100644 --- a/charts/incubator/ispy-agent-dvr/CHANGELOG.md +++ b/charts/incubator/ispy-agent-dvr/CHANGELOG.md @@ -7,4 +7,3 @@ #### Feat * Add ispy-agent-dvr ([#2162](https://github.com/truecharts/apps/issues/2162)) - diff --git a/charts/incubator/ispy-agent-dvr/security.md b/charts/incubator/ispy-agent-dvr/security.md index 1c4f0a21499..47ec19fd319 100644 --- a/charts/incubator/ispy-agent-dvr/security.md +++ b/charts/incubator/ispy-agent-dvr/security.md @@ -12,9 +12,9 @@ hide: ##### Scan Results #### Chart Object: ispy-agent-dvr/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-ispy-agent-dvr' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -51,11 +51,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -83,11 +83,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -115,11 +115,11 @@ hide: #### Container: doitandbedone/ispyagentdvr:3.8.6.0@sha256:b2ad9ed49abfcbb6f82362209fbf4cdccdb4abf2cf7aa7c9bf276ad8b5ed312c (ubuntu 18.04) - + **ubuntu** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | apt | CVE-2020-27350 | MEDIUM | 1.6.12ubuntu0.1 | 1.6.12ubuntu0.2 |
Expand...https://bugs.launchpad.net/bugs/1899193
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27350
https://security.netapp.com/advisory/ntap-20210108-0005/
https://ubuntu.com/security/notices/USN-4667-1
https://ubuntu.com/security/notices/USN-4667-2
https://usn.ubuntu.com/usn/usn-4667-1
https://www.debian.org/security/2020/dsa-4808
| @@ -894,4 +894,3 @@ hide: | tar | CVE-2018-20482 | LOW | 1.29b-2ubuntu0.1 | 1.29b-2ubuntu0.2 |
Expand...http://git.savannah.gnu.org/cgit/tar.git/commit/?id=c15c42ccd1e2377945fd0414eca1a49294bff454
http://lists.gnu.org/archive/html/bug-tar/2018-12/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
http://www.securityfocus.com/bid/106354
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20482
https://lists.debian.org/debian-lts-announce/2018/12/msg00023.html
https://lists.debian.org/debian-lts-announce/2021/11/msg00025.html
https://news.ycombinator.com/item?id=18745431
https://security.gentoo.org/glsa/201903-05
https://twitter.com/thatcks/status/1076166645708668928
https://ubuntu.com/security/notices/USN-4692-1
https://utcc.utoronto.ca/~cks/space/blog/sysadmin/TarFindingTruncateBug
| | tar | CVE-2019-9923 | LOW | 1.29b-2ubuntu0.1 | 1.29b-2ubuntu0.2 |
Expand...http://git.savannah.gnu.org/cgit/tar.git/commit/?id=cb07844454d8cc9fb21f53ace75975f91185a120
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
http://savannah.gnu.org/bugs/?55369
https://bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9923
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
https://ubuntu.com/security/notices/USN-4692-1
| | x11-common | CVE-2012-1093 | LOW | 1:7.7+19ubuntu7.1 | |
Expand...http://vladz.devzero.fr/012_x11-common-vuln.html
http://www.openwall.com/lists/oss-security/2012/02/29/1
http://www.openwall.com/lists/oss-security/2012/03/01/1
https://access.redhat.com/security/cve/cve-2012-1093
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1093
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2012-1093
| - diff --git a/charts/stable/mosquitto/CHANGELOG.md b/charts/stable/mosquitto/CHANGELOG.md index 8b624967f25..fd68dc2b800 100644 --- a/charts/stable/mosquitto/CHANGELOG.md +++ b/charts/stable/mosquitto/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [mosquitto-5.0.2](https://github.com/truecharts/apps/compare/mosquitto-5.0.1...mosquitto-5.0.2) (2022-03-14) + +#### Fix + +* remove portal button ([#2164](https://github.com/truecharts/apps/issues/2164)) + + + ### [mosquitto-5.0.1](https://github.com/truecharts/apps/compare/mosquitto-5.0.0...mosquitto-5.0.1) (2022-03-07) diff --git a/charts/stable/mosquitto/helm-values.md b/charts/stable/mosquitto/helm-values.md index 653629a3da8..5248c779425 100644 --- a/charts/stable/mosquitto/helm-values.md +++ b/charts/stable/mosquitto/helm-values.md @@ -12,11 +12,14 @@ You will, however, be able to use all values referenced in the common chart here | Key | Type | Default | Description | |-----|------|---------|-------------| | auth.enabled | bool | `false` | By enabling this, `allow_anonymous` gets set to `false` in the mosquitto config. | -| image.pullPolicy | string | `"IfNotPresent"` | image pull policy | -| image.repository | string | `"tccr.io/truecharts/eclipse-mosquitto"` | image repository | -| image.tag | string | `"v2.0.14@sha256:047eb800158878c1bea9e6281e2dc3081b53b61ca10fdca5a17816c6fbe15216"` | image tag | -| persistence.configinc | object | See values.yaml | Configure a persistent volume to place *.conf mosquitto-config-files in. When enabled, this gets set as `include_dir` in the mosquitto config. | -| persistence.data | object | See values.yaml | Configure a persistent volume to place mosquitto data in. When enabled, this enables `persistence` and `persistence_location` in the mosquitto config. | -| service | object | See values.yaml | Configures service settings for the chart. Normally this does not need to be modified. | +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"tccr.io/truecharts/eclipse-mosquitto"` | | +| image.tag | string | `"v2.0.14@sha256:047eb800158878c1bea9e6281e2dc3081b53b61ca10fdca5a17816c6fbe15216"` | | +| persistence.configinc.enabled | bool | `true` | | +| persistence.configinc.mountPath | string | `"/mosquitto/configinc"` | | +| persistence.data.enabled | bool | `true` | | +| persistence.data.mountPath | string | `"/mosquitto/data"` | | +| service.main.ports.main.port | int | `1883` | | +| service.main.ports.main.targetPort | int | `1883` | | All Rights Reserved - The TrueCharts Project diff --git a/docs/apps/incubator/ispy-agent-dvr/CHANGELOG.md b/docs/apps/incubator/ispy-agent-dvr/CHANGELOG.md index 460f49f9fe4..139166f5af1 100644 --- a/docs/apps/incubator/ispy-agent-dvr/CHANGELOG.md +++ b/docs/apps/incubator/ispy-agent-dvr/CHANGELOG.md @@ -7,4 +7,3 @@ #### Feat * Add ispy-agent-dvr ([#2162](https://github.com/truecharts/apps/issues/2162)) - diff --git a/docs/apps/incubator/ispy-agent-dvr/security.md b/docs/apps/incubator/ispy-agent-dvr/security.md index 1c4f0a21499..47ec19fd319 100644 --- a/docs/apps/incubator/ispy-agent-dvr/security.md +++ b/docs/apps/incubator/ispy-agent-dvr/security.md @@ -12,9 +12,9 @@ hide: ##### Scan Results #### Chart Object: ispy-agent-dvr/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-ispy-agent-dvr' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -51,11 +51,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -83,11 +83,11 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.14.2@sha256:4095394abbae907e94b1f2fd2e2de6c4f201a5b9704573243ca8eb16db8cdb7c (alpine 3.14.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.33.1-r3 | 1.33.1-r6 |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -115,11 +115,11 @@ hide: #### Container: doitandbedone/ispyagentdvr:3.8.6.0@sha256:b2ad9ed49abfcbb6f82362209fbf4cdccdb4abf2cf7aa7c9bf276ad8b5ed312c (ubuntu 18.04) - + **ubuntu** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | apt | CVE-2020-27350 | MEDIUM | 1.6.12ubuntu0.1 | 1.6.12ubuntu0.2 |
Expand...https://bugs.launchpad.net/bugs/1899193
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27350
https://security.netapp.com/advisory/ntap-20210108-0005/
https://ubuntu.com/security/notices/USN-4667-1
https://ubuntu.com/security/notices/USN-4667-2
https://usn.ubuntu.com/usn/usn-4667-1
https://www.debian.org/security/2020/dsa-4808
| @@ -894,4 +894,3 @@ hide: | tar | CVE-2018-20482 | LOW | 1.29b-2ubuntu0.1 | 1.29b-2ubuntu0.2 |
Expand...http://git.savannah.gnu.org/cgit/tar.git/commit/?id=c15c42ccd1e2377945fd0414eca1a49294bff454
http://lists.gnu.org/archive/html/bug-tar/2018-12/msg00023.html
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
http://www.securityfocus.com/bid/106354
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20482
https://lists.debian.org/debian-lts-announce/2018/12/msg00023.html
https://lists.debian.org/debian-lts-announce/2021/11/msg00025.html
https://news.ycombinator.com/item?id=18745431
https://security.gentoo.org/glsa/201903-05
https://twitter.com/thatcks/status/1076166645708668928
https://ubuntu.com/security/notices/USN-4692-1
https://utcc.utoronto.ca/~cks/space/blog/sysadmin/TarFindingTruncateBug
| | tar | CVE-2019-9923 | LOW | 1.29b-2ubuntu0.1 | 1.29b-2ubuntu0.2 |
Expand...http://git.savannah.gnu.org/cgit/tar.git/commit/?id=cb07844454d8cc9fb21f53ace75975f91185a120
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
http://savannah.gnu.org/bugs/?55369
https://bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9923
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
https://ubuntu.com/security/notices/USN-4692-1
| | x11-common | CVE-2012-1093 | LOW | 1:7.7+19ubuntu7.1 | |
Expand...http://vladz.devzero.fr/012_x11-common-vuln.html
http://www.openwall.com/lists/oss-security/2012/02/29/1
http://www.openwall.com/lists/oss-security/2012/03/01/1
https://access.redhat.com/security/cve/cve-2012-1093
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1093
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2012-1093
| - diff --git a/docs/apps/stable/mosquitto/CHANGELOG.md b/docs/apps/stable/mosquitto/CHANGELOG.md index 8b624967f25..fd68dc2b800 100644 --- a/docs/apps/stable/mosquitto/CHANGELOG.md +++ b/docs/apps/stable/mosquitto/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [mosquitto-5.0.2](https://github.com/truecharts/apps/compare/mosquitto-5.0.1...mosquitto-5.0.2) (2022-03-14) + +#### Fix + +* remove portal button ([#2164](https://github.com/truecharts/apps/issues/2164)) + + + ### [mosquitto-5.0.1](https://github.com/truecharts/apps/compare/mosquitto-5.0.0...mosquitto-5.0.1) (2022-03-07) diff --git a/docs/apps/stable/mosquitto/helm-values.md b/docs/apps/stable/mosquitto/helm-values.md index 653629a3da8..5248c779425 100644 --- a/docs/apps/stable/mosquitto/helm-values.md +++ b/docs/apps/stable/mosquitto/helm-values.md @@ -12,11 +12,14 @@ You will, however, be able to use all values referenced in the common chart here | Key | Type | Default | Description | |-----|------|---------|-------------| | auth.enabled | bool | `false` | By enabling this, `allow_anonymous` gets set to `false` in the mosquitto config. | -| image.pullPolicy | string | `"IfNotPresent"` | image pull policy | -| image.repository | string | `"tccr.io/truecharts/eclipse-mosquitto"` | image repository | -| image.tag | string | `"v2.0.14@sha256:047eb800158878c1bea9e6281e2dc3081b53b61ca10fdca5a17816c6fbe15216"` | image tag | -| persistence.configinc | object | See values.yaml | Configure a persistent volume to place *.conf mosquitto-config-files in. When enabled, this gets set as `include_dir` in the mosquitto config. | -| persistence.data | object | See values.yaml | Configure a persistent volume to place mosquitto data in. When enabled, this enables `persistence` and `persistence_location` in the mosquitto config. | -| service | object | See values.yaml | Configures service settings for the chart. Normally this does not need to be modified. | +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"tccr.io/truecharts/eclipse-mosquitto"` | | +| image.tag | string | `"v2.0.14@sha256:047eb800158878c1bea9e6281e2dc3081b53b61ca10fdca5a17816c6fbe15216"` | | +| persistence.configinc.enabled | bool | `true` | | +| persistence.configinc.mountPath | string | `"/mosquitto/configinc"` | | +| persistence.data.enabled | bool | `true` | | +| persistence.data.mountPath | string | `"/mosquitto/data"` | | +| service.main.ports.main.port | int | `1883` | | +| service.main.ports.main.targetPort | int | `1883` | | All Rights Reserved - The TrueCharts Project diff --git a/docs/index.yaml b/docs/index.yaml index cb671b9bd8f..8fc48c0450e 100644 --- a/docs/index.yaml +++ b/docs/index.yaml @@ -38641,6 +38641,38 @@ entries: - https://github.com/truecharts/apps/releases/download/monica-0.0.12/monica-0.0.12.tgz version: 0.0.12 mosquitto: + - annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - homeautomation + truecharts.org/grade: U + apiVersion: v2 + appVersion: 2.0.14 + created: "2022-03-14T18:55:26.644102108Z" + dependencies: + - name: common + repository: https://truecharts.org + version: 9.1.2 + description: Eclipse Mosquitto - An open source MQTT broker + digest: fa7aca54d33a3471e5628b5ac3fc1fef6a443824cf204ae910c2b49a41a725cc + home: https://github.com/truecharts/apps/tree/master/charts/stable/mosquitto + icon: https://truecharts.org/_static/img/appicons/mosquitto.png + keywords: + - mosquitto + - MQTT + - eclipse-iot + kubeVersion: '>=1.16.0-0' + maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org + name: mosquitto + sources: + - https://github.com/eclipse/mosquitto + type: application + urls: + - https://github.com/truecharts/apps/releases/download/mosquitto-5.0.2/mosquitto-5.0.2.tgz + version: 5.0.2 - annotations: truecharts.org/SCALE-support: "true" truecharts.org/catagories: | @@ -74189,4 +74221,4 @@ entries: urls: - https://github.com/truecharts/apps/releases/download/zwavejs2mqtt-9.0.24/zwavejs2mqtt-9.0.24.tgz version: 9.0.24 -generated: "2022-03-14T17:29:15.803134936Z" +generated: "2022-03-14T18:55:26.655794387Z"