From d2a9e98a3f1383f6fb734d949d86681b45145490 Mon Sep 17 00:00:00 2001 From: Antonin Bas Date: Tue, 25 Jun 2024 11:43:24 -0700 Subject: [PATCH] Upgrade CNI plugins from v1.4.0 to v1.5.1 (#6475) For [CVE-2024-24790](https://nvd.nist.gov/vuln/detail/CVE-2024-24790) The vulnerability is currently flagged by scanners with CRTICIAL severity. After review, I do not think this vulnerability can really be exploited in the context of the antrea-agent. Signed-off-by: Antonin Bas --- build/images/deps/cni-binaries-version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/images/deps/cni-binaries-version b/build/images/deps/cni-binaries-version index 66d62a80013..53b5bbb127b 100644 --- a/build/images/deps/cni-binaries-version +++ b/build/images/deps/cni-binaries-version @@ -1 +1 @@ -v1.4.1 +v1.5.1