search

kubernetes-sigs / ip-masq-agent

Manage IP masquerade on nodes
Apache License 2.0
217 stars 70 forks source link

Which version of ip-masq-agent has stable Debian as OS? #78

Closed smartaquarius10 closed 2 years ago

smartaquarius10 commented 2 years ago

Team,

Version 2.5.0.10 has Debian 9 stretch release which has vulnerabilities CVE-2019-12900 & CVE-2018-12886. Which version of ip-masq-agent doesn't have these issues.

As far as I know vulnerability CVE-2019-12900 is resolved in Debian buster.

Please suggest.

Thank you

jingyuanliang commented 2 years ago

The latest version (2.7.0) is using bullseye and should be good. We didn't build a release tarball but you should be able to use it directly from the k8s.gcr.io registry.

MrHohn commented 2 years ago

Ref https://github.com/kubernetes-sigs/ip-masq-agent/releases/tag/v2.7.0 for the available k8s.gcr.io images.