From a77bbf3a54453f72c91e6c42420fa4a74f6ceab9 Mon Sep 17 00:00:00 2001 From: Antonin Bas Date: Wed, 26 Jun 2024 13:41:20 -0700 Subject: [PATCH] Upgrade CNI plugins from v1.4.0 to v1.5.1 (#6475) (#6484) For [CVE-2024-24790](https://nvd.nist.gov/vuln/detail/CVE-2024-24790) The vulnerability is currently flagged by scanners with CRTICIAL severity. After review, I do not think this vulnerability can really be exploited in the context of the antrea-agent. Signed-off-by: Antonin Bas --- build/images/deps/cni-binaries-version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/images/deps/cni-binaries-version b/build/images/deps/cni-binaries-version index 66d62a80013..53b5bbb127b 100644 --- a/build/images/deps/cni-binaries-version +++ b/build/images/deps/cni-binaries-version @@ -1 +1 @@ -v1.4.1 +v1.5.1