Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Docker 18.09.2 on Ubuntu to fix CVE-2019-573. Remove Docker version from API #193

Merged
merged 1 commit into from
Feb 13, 2019

Conversation

xmudrii
Copy link
Member

@xmudrii xmudrii commented Feb 13, 2019

What this PR does / why we need it:

Fixed:

  • CVE is fixed for Ubuntu by installing Docker 18.09.2
  • [Breaking] .versions.docker API field is removed

Non-fixed:

  • CVE for CentOS is not fixed, however it seems to use the latest version as there's no version binding

Action not required:

  • CoreOS Docker version depends on the CoreOS version

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #192

Release note:

Deploy Docker 18.09.2 when provisioning Ubuntu clusters to fix CVE-2019-573. Remove API field for choosing Docker version.

/assign @kron4eg

@kubermatic-bot kubermatic-bot added release-note Denotes a PR that will be considered when it comes time to generate release notes. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Feb 13, 2019
@@ -143,12 +142,12 @@ echo "deb http://apt.kubernetes.io/ kubernetes-xenial main" | \
sudo tee /etc/apt/sources.list.d/kubernetes.list
sudo apt-get update

docker_ver=$(apt-cache madison docker-ce | grep "{{ .DOCKER_VERSION }}" | head -1 | awk '{print $3}')
docker_pkg="docker-ce=5:18.09.2~3-0~ubuntu-bionic"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

that 18.09.2 should be a constant and please bring apt-cache madison back to find actual dpkg version

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please check now

@kubermatic-bot kubermatic-bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Feb 13, 2019
@kron4eg
Copy link
Member

kron4eg commented Feb 13, 2019

/lgtm
/approve

@kubermatic-bot kubermatic-bot added the lgtm Indicates that a PR is ready to be merged. label Feb 13, 2019
@kubermatic-bot
Copy link
Contributor

LGTM label has been added.

Git tree hash: 0671eeedd65d7083462e72f023307841c73fd457

@kubermatic-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kron4eg

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubermatic-bot kubermatic-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 13, 2019
@kubermatic-bot kubermatic-bot merged commit a15cb74 into master Feb 13, 2019
@kubermatic-bot kubermatic-bot deleted the cve-2019-573 branch February 13, 2019 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Use Docker 18.09.2 in order to fix CVE-2019-573
3 participants