chore(bors): merge pull request #402

402: chore(deps): address CVE-2023-39325, CVE-2023-47108 and GHSA-m425-mq9… r=tiagolobocastro a=cmontemuino

Upgrade images to fix the following vulnerabilities:

- https://avd.aquasec.com/nvd/2023/cve-2023-47108/
- https://avd.aquasec.com/nvd/2023/cve-2023-39325/
- GHSA-m425-mq94-257g


## Description

CVE-2023-47108 and CVE-2023-39325 fixed in v2.10.0 from node-driver-registar

GHSA-m425-mq94-257g fixed in v2.10.0 from node-driver-registar, and v6.3.3 from csi-snapshotter (and controller) images.


## Motivation and Context

Have no HIGH vulnerabilities in mayastor-extensions

## Regression
No


Co-authored-by: cmontemuino <1761056+cmontemuino@users.noreply.github.com>

chart/README.md

@@ -104,11 +104,11 @@ $ helm install my-release openebs/mayastor
 | csi.​image.​attacherTag | csi-attacher image release tag | `"v4.3.0"` |
 | csi.​image.​provisionerTag | csi-provisioner image release tag | `"v3.5.0"` |
 | csi.​image.​pullPolicy | imagePullPolicy for all CSI Sidecar images | `"IfNotPresent"` |
-| csi.​image.​registrarTag | csi-node-driver-registrar image release tag | `"v2.9.0"` |
+| csi.​image.​registrarTag | csi-node-driver-registrar image release tag | `"v2.10.0"` |
 | csi.​image.​registry | Image registry to pull all CSI Sidecar images | `"registry.k8s.io"` |
 | csi.​image.​repo | Image registry's namespace | `"sig-storage"` |
-| csi.​image.​snapshotControllerTag | csi-snapshot-controller image release tag | `"v6.3.1"` |
-| csi.​image.​snapshotterTag | csi-snapshotter image release tag | `"v6.3.1"` |
+| csi.​image.​snapshotControllerTag | csi-snapshot-controller image release tag | `"v6.3.3"` |
+| csi.​image.​snapshotterTag | csi-snapshotter image release tag | `"v6.3.3"` |
 | csi.​node.​kubeletDir | The kubeletDir directory for the csi-node plugin | `"/var/lib/kubelet"` |
 | csi.​node.​nvme.​ctrl_loss_tmo | The ctrl_loss_tmo (controller loss timeout) in seconds | `"1980"` |
 | csi.​node.​priorityClassName | Set PriorityClass, overrides global | `""` |

chart/values.yaml

@@ -269,11 +269,11 @@ csi:
     # -- csi-attacher image release tag
     attacherTag: v4.3.0
     # -- csi-snapshotter image release tag
-    snapshotterTag: v6.3.1
+    snapshotterTag: v6.3.3
     # -- csi-snapshot-controller image release tag
-    snapshotControllerTag: v6.3.1
+    snapshotControllerTag: v6.3.3
     # -- csi-node-driver-registrar image release tag
-    registrarTag: v2.9.0
+    registrarTag: v2.10.0
 
   controller:
     # -- Log level for the csi controller