Closed smartaquarius10 closed 2 years ago
The latest version (2.7.0) is using bullseye and should be good. We didn't build a release tarball but you should be able to use it directly from the k8s.gcr.io registry.
Ref https://github.com/kubernetes-sigs/ip-masq-agent/releases/tag/v2.7.0 for the available k8s.gcr.io images.
Team,
Version 2.5.0.10 has Debian 9 stretch release which has vulnerabilities CVE-2019-12900 & CVE-2018-12886. Which version of ip-masq-agent doesn't have these issues.
As far as I know vulnerability CVE-2019-12900 is resolved in Debian buster.
Please suggest.
Thank you