Merge pull request #1225 from ErikJiang/bump_yq_version

fix CVE-2023-24538 vulnerabilities in spray image
kubean-io · May 7, 2024 · 882abae · 882abae
2 parents aa83907 + 39e8288
commit 882abae
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/build/images/kubespray/Dockerfile b/build/images/kubespray/Dockerfile
@@ -29,7 +29,7 @@ RUN ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/\(arm\)\(64\)\?.*/\1\2/' -
          KUBE_VERSION=$(sed -n 's/^kube_version: //p' roles/kubespray-defaults/defaults/main.yaml); \
        fi \
     && curl -LO https://dl.k8s.io/release/$KUBE_VERSION/bin/linux/$ARCH/kubectl \
-    && curl -LO https://github.com/mikefarah/yq/releases/download/v4.25.2/yq_linux_$ARCH \
+    && curl -LO https://github.com/mikefarah/yq/releases/download/v4.43.1/yq_linux_$ARCH \
     && chmod a+x kubectl yq_linux_$ARCH \
     && mv kubectl /usr/local/bin/kubectl \
     && mv yq_linux_$ARCH /usr/local/bin/yq