From a01c2dc7e4f58dc307914bafa0dcfb9c3737cff9 Mon Sep 17 00:00:00 2001 From: Yaron Kaikov Date: Sun, 9 Nov 2025 17:02:33 +0200 Subject: [PATCH] install-dependencies.sh: update node_exporter to 1.10.2 Update node exporter to solve CVE-2025-22871 [regenerate frozen toolchain with optimized clang from https://devpkg.scylladb.com/clang/clang-18.1.8-Fedora-40-aarch64.tar.gz https://devpkg.scylladb.com/clang/clang-18.1.8-Fedora-40-x86_64.tar.gz ] Fixes: https://scylladb.atlassian.net/browse/SCYLLADB-5 Closes scylladb/scylladb#26916 (cherry picked from commit c601371b57e1c21601ccfe6a2ab598dd22e95ff7) Closes scylladb/scylladb#26950 --- install-dependencies.sh | 8 ++++---- tools/toolchain/image | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/install-dependencies.sh b/install-dependencies.sh index 3a093cd58d..546d09c966 100755 --- a/install-dependencies.sh +++ b/install-dependencies.sh @@ -213,11 +213,11 @@ go_arch() { echo ${GO_ARCH["$(arch)"]} } -NODE_EXPORTER_VERSION=1.9.0 +NODE_EXPORTER_VERSION=1.10.2 declare -A NODE_EXPORTER_CHECKSUM=( - ["x86_64"]=e7b65ea30eec77180487d518081d3dcb121b975f6d95f1866dfb9156c5b24075 - ["aarch64"]=5314fae1efff19abf807cfc8bd7dadbd47a35565c1043c236ffb0689dc15ef4f - ["s390x"]=089d2c2f87b4d716dd5ff006b89ab4424e7917f67830a8dd580d528f1d99ca58 + ["x86_64"]=c46e5b6f53948477ff3a19d97c58307394a29fe64a01905646f026ddc32cb65b + ["aarch64"]=de69ec8341c8068b7c8e4cfe3eb85065d24d984a3b33007f575d307d13eb89a6 + ["s390x"]=3ad4b412254769ab5128bc7211a324cd6e0643540b63351fd6b61830f00402de ) NODE_EXPORTER_DIR=/opt/scylladb/dependencies diff --git a/tools/toolchain/image b/tools/toolchain/image index e0280a2405..5089f74b1a 100644 --- a/tools/toolchain/image +++ b/tools/toolchain/image @@ -1 +1 @@ -docker.io/scylladb/scylla-toolchain:fedora-40-branch-2025.1-20250421 +docker.io/scylladb/scylla-toolchain:fedora-40-branch-2025.1-20251112