Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix for nginx and golang for CVE-2023-44487 #6381

Merged
merged 6 commits into from
Oct 11, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion SPECS-EXTENDED/buildah/buildah.spec
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
Summary: A command line tool used for creating OCI Images
Name: buildah
Version: 1.18.0
Release: 18%{?dist}
Release: 19%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -123,6 +123,9 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
%{_datadir}/%{name}/test

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.18.0-19
- Bump release to rebuild with updated version of Go.

* Tue Oct 03 2023 Mandeep Plaha <mandeepplaha@microsoft.com> - 1.18.0-18
- Bump release to rebuild against glibc 2.35-5

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@

Name: %{project}-%{repo}
Version: 1.1.1
Release: 11%{?dist}
Release: 12%{?dist}
Summary: Libraries for writing CNI plugin
License: ASL 2.0 and BSD and MIT
Vendor: Microsoft Corporation
Expand Down Expand Up @@ -129,6 +129,9 @@ install -p plugins/ipam/dhcp/systemd/cni-dhcp.socket %{buildroot}%{_unitdir}
%{_unitdir}/cni-dhcp.socket

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.1.1-12
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.1.1-11
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS-EXTENDED/delve/delve.spec
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ Vendor: Microsoft Corporation
Distribution: Mariner
Name: delve
Version: 1.5.0
Release: 14%{?dist}
Release: 15%{?dist}
Summary: A debugger for the Go programming language

License: MIT
Expand Down Expand Up @@ -72,6 +72,9 @@ done


%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.5.0-15
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.5.0-14
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS-EXTENDED/podman/podman.spec
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@

Name: podman
Version: 4.1.1
Release: 15%{?dist}
Release: 16%{?dist}
License: ASL 2.0 and BSD and ISC and MIT and MPLv2.0
Summary: Manage Pods, Containers and Container Images
Vendor: Microsoft Corporation
Expand Down Expand Up @@ -387,6 +387,9 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/

# rhcontainerbot account currently managed by lsm5
%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 4.1.1-16
- Bump release to rebuild with updated version of Go.

* Tue Oct 03 2023 Mandeep Plaha <mandeepplaha@microsoft.com> - 4.1.1-15
- Bump release to rebuild against glibc 2.35-5

Expand Down
5 changes: 4 additions & 1 deletion SPECS-EXTENDED/umoci/umoci.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: Open Container Image manipulation tool
Name: umoci
Version: 0.4.7
Release: 11%{?dist}
Release: 12%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -39,6 +39,9 @@ go test -mod=vendor
%{_bindir}/umoci

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 0.4.7-12
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.4.7-11
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/KeysInUse-OpenSSL/KeysInUse-OpenSSL.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: The KeysInUse Engine for OpenSSL allows the logging of private key usage through OpenSSL
Name: KeysInUse-OpenSSL
Version: 0.3.4
Release: 1%{?dist}
Release: 2%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -74,6 +74,9 @@ if [ -x %{_bindir}/keysinuseutil ]; then
fi

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 0.3.4-2
- Bump release to rebuild with updated version of Go.

* Fri Sep 22 2023 Maxwell Moyer-McKee <mamckee@microsoft.com> - 0.3.4-1
- Fix memory leak for high reload public keys

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
Summary: Application Gateway Ingress Controller
Name: application-gateway-kubernetes-ingress
Version: 1.4.0
Release: 14%{?dist}
Release: 15%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -54,6 +54,9 @@ cp appgw-ingress %{buildroot}%{_bindir}/
%{_bindir}/appgw-ingress

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.4.0-15
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.4.0-14
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/azcopy/azcopy.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: The new Azure Storage data transfer utility - AzCopy v10
Name: azcopy
Version: 10.15.0
Release: 12%{?dist}
Release: 13%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -61,6 +61,9 @@ go test -mod=vendor
%{_bindir}/azcopy

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 10.15.0-13
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 10.15.0-12
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/blobfuse/blobfuse.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: FUSE adapter - Azure Storage Blobs
Name: blobfuse
Version: 1.4.5
Release: 11%{?dist}
Release: 12%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -46,6 +46,9 @@ install -p -m 755 build/blobfuse %{buildroot}%{_bindir}/
%{_bindir}/blobfuse

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.4.5-12
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.4.5-11
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/blobfuse2/blobfuse2.spec
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
Summary: FUSE adapter - Azure Storage
Name: blobfuse2
Version: %{blobfuse2_version}
Release: 1%{?dist}
Release: 2%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -80,6 +80,9 @@ install -D -m 0644 ./setup/blobfuse2-logrotate %{buildroot}%{_sysconfdir}/logrot
%{_sysconfdir}/logrotate.d/blobfuse2

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 2.1.0-2
- Bump release to rebuild with updated version of Go.

* Mon Sep 04 2023 Anubhuti Shruti <ashruti@microsoft.com> - 2.1.0-1
- Bump version to 2.1.0

Expand Down
5 changes: 4 additions & 1 deletion SPECS/cert-manager/cert-manager.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: Automatically provision and manage TLS certificates in Kubernetes
Name: cert-manager
Version: 1.11.2
Release: 4%{?dist}
Release: 5%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -109,6 +109,9 @@ install -D -m0755 bin/webhook %{buildroot}%{_bindir}/
%{_bindir}/webhook

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.11.2-5
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.11.2-4
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/cf-cli/cf-cli.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: The official command line client for Cloud Foundry.
Name: cf-cli
Version: 8.4.0
Release: 12%{?dist}
Release: 13%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -59,6 +59,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./out/cf
%{_bindir}/cf

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 8.4.0-13
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 8.4.0-12
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/cni-plugins/cni-plugins.spec
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
Summary: Container Network Interface (CNI) plugins
Name: cni-plugins
Version: 0.9.1
Release: 14%{?dist}
Release: 15%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -39,6 +39,9 @@ make -k check |& tee %{_specdir}/%{name}-check-log || %{nocheck}
%{_default_cni_plugins_dir}/*

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 0.9.1-15
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.9.1-14
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/cni/cni.spec
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
Summary: Container Network Interface - networking for Linux containers
Name: cni
Version: 1.0.1
Release: 13%{?dist}
Release: 14%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -113,6 +113,9 @@ install -m 755 -d "%{buildroot}%{cni_doc_dir}"
%{_sbindir}/cnitool

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.0.1-14
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.0.1-13
- Bump release to rebuild with go 1.19.12

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
Summary: Container native virtualization
Name: containerized-data-importer
Version: 1.55.0
Release: 14%{?dist}
Release: 15%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -198,6 +198,9 @@ install -m 0644 _out/manifests/release/cdi-cr.yaml %{buildroot}%{_datadir}/cdi/m
%{_datadir}/cdi/manifests

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.55.0-15
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.55.0-14
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/coredns/coredns-1.8.0.spec
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.8.0
Release: 18%{?dist}
Release: 19%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.8.0-19
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.8.0-18
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/coredns/coredns-1.8.4.spec
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.8.4
Release: 17%{?dist}
Release: 18%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.8.4-18
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.8.4-17
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/coredns/coredns-1.8.6.spec
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.8.6
Release: 13%{?dist}
Release: 14%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.8.6-14
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.8.6-13
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/coredns/coredns-1.9.3.spec
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.9.3
Release: 8%{?dist}
Release: 9%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.9.3-9
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.9.3-8
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/cri-o/cri-o.spec
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Summary: OCI-based implementation of Kubernetes Container Runtime Interfa
# Define macros for further referenced sources
Name: cri-o
Version: 1.21.2
Release: 16%{?dist}
Release: 17%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -203,6 +203,9 @@ mkdir -p /opt/cni/bin
%{_fillupdir}/sysconfig.kubelet

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.21.2-17
- Bump release to rebuild with updated version of Go.

* Mon Aug 07 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.21.2-16
- Bump release to rebuild with go 1.19.12

Expand Down
5 changes: 4 additions & 1 deletion SPECS/cri-tools/cri-tools.spec
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
Summary: CRI tools
Name: cri-tools
Version: 1.28.0
Release: 1%{?dist}
Release: 2%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -44,6 +44,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} "${BUILD_FOLDER}/critest"
%{_bindir}/critest

%changelog
* Tue Oct 10 2023 Dan Streetman <ddstreet@ieee.org> - 1.28.0-2
- Bump release to rebuild with updated version of Go.

* Wed Sep 27 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.28.0-1
- Auto-upgrade to 1.28.0 to fix vendored vulns CVE-2021-38561, CVE-2021-44716,
CVE-2022-32149, CVE-2022-27664, CVE-2022-29526, CVE-2022-28948
Expand Down
Loading