Skip to content

Commit 19dd9cd

Browse files
akhila-gurujuakhila-guruju
authored
[High] Patch golang & golang-1.18 for CVE-2025-47907, golang for CVE-2025-4674, CVE-2025-47906 and [Medium] Patch golang & golang-1.18 for CVE-2025-4673 (microsoft#14552)
1 parent f46c600 commit 19dd9cd

File tree

71 files changed

+1691
-64
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

71 files changed

+1691
-64
lines changed

‎SPECS-EXTENDED/buildah/buildah.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@
2121
Summary: A command line tool used for creating OCI Images
2222
Name: buildah
2323
Version: 1.18.0
24-
Release: 25%{?dist}
24+
Release: 26%{?dist}
2525
License: ASL 2.0
2626
Vendor: Microsoft Corporation
2727
Distribution: Mariner
@@ -123,6 +123,9 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
123123
%{_datadir}/%{name}/test
124124

125125
%changelog
126+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 1.18.0-26
127+
- Bump release to rebuild with golang
128+
126129
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 1.18.0-25
127130
- Bump release to rebuild with go 1.22.7
128131

‎SPECS-EXTENDED/containernetworking-plugins/containernetworking-plugins.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@
2424

2525
Name: %{project}-%{repo}
2626
Version: 1.1.1
27-
Release: 16%{?dist}
27+
Release: 17%{?dist}
2828
Summary: Libraries for writing CNI plugin
2929
License: ASL 2.0 and BSD and MIT
3030
Vendor: Microsoft Corporation
@@ -129,6 +129,9 @@ install -p plugins/ipam/dhcp/systemd/cni-dhcp.socket %{buildroot}%{_unitdir}
129129
%{_unitdir}/cni-dhcp.socket
130130

131131
%changelog
132+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 1.1.1-17
133+
- Bump release to rebuild with golang
134+
132135
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 1.1.1-16
133136
- Bump release to rebuild with go 1.22.7
134137

‎SPECS-EXTENDED/delve/delve.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ Vendor: Microsoft Corporation
22
Distribution: Mariner
33
Name: delve
44
Version: 1.5.0
5-
Release: 19%{?dist}
5+
Release: 20%{?dist}
66
Summary: A debugger for the Go programming language
77

88
License: MIT
@@ -72,6 +72,9 @@ done
7272

7373

7474
%changelog
75+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 1.5.0-20
76+
- Bump release to rebuild with golang
77+
7578
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 1.5.0-19
7679
- Bump release to rebuild with go 1.22.7
7780

‎SPECS-EXTENDED/nmi/nmi.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
Summary: Node Managed Identity
33
Name: nmi
44
Version: 1.8.17
5-
Release: 5%{?dist}
5+
Release: 6%{?dist}
66
License: MIT
77
Vendor: Microsoft Corporation
88
Distribution: Mariner
@@ -62,6 +62,9 @@ popd
6262
%{_bindir}/%{name}
6363

6464
%changelog
65+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 1.8.17-6
66+
- Bump release to rebuild with golang
67+
6568
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 1.8.17-5
6669
- Bump release to rebuild with go 1.22.7
6770

‎SPECS-EXTENDED/podman/podman.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636

3737
Name: podman
3838
Version: 4.1.1
39-
Release: 22%{?dist}
39+
Release: 23%{?dist}
4040
License: ASL 2.0 and BSD and ISC and MIT and MPLv2.0
4141
Summary: Manage Pods, Containers and Container Images
4242
Vendor: Microsoft Corporation
@@ -387,6 +387,9 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/
387387

388388
# rhcontainerbot account currently managed by lsm5
389389
%changelog
390+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 4.1.1-23
391+
- Bump release to rebuild with golang
392+
390393
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 4.1.1-22
391394
- Bump release to rebuild with go 1.22.7
392395

‎SPECS-EXTENDED/umoci/umoci.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: Open Container Image manipulation tool
22
Name: umoci
33
Version: 0.4.7
4-
Release: 17%{?dist}
4+
Release: 18%{?dist}
55
License: Apache-2.0
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -39,6 +39,9 @@ go test -mod=vendor
3939
%{_bindir}/umoci
4040

4141
%changelog
42+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 0.4.7-18
43+
- Bump release to rebuild with golang
44+
4245
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 0.4.7-17
4346
- Bump release to rebuild with go 1.22.7
4447

‎SPECS/KeysInUse-OpenSSL/KeysInUse-OpenSSL.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: The KeysInUse Engine for OpenSSL allows the logging of private key usage through OpenSSL
22
Name: KeysInUse-OpenSSL
33
Version: 0.3.4
4-
Release: 7%{?dist}
4+
Release: 8%{?dist}
55
License: MIT
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -74,6 +74,9 @@ if [ -x %{_bindir}/keysinuseutil ]; then
7474
fi
7575

7676
%changelog
77+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 0.3.4-8
78+
- Bump release to rebuild with golang
79+
7780
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 0.3.4-7
7881
- Bump release to rebuild with go 1.22.7
7982

‎SPECS/application-gateway-kubernetes-ingress/application-gateway-kubernetes-ingress.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
Summary: Application Gateway Ingress Controller
33
Name: application-gateway-kubernetes-ingress
44
Version: 1.4.0
5-
Release: 25%{?dist}
5+
Release: 26%{?dist}
66
License: MIT
77
Vendor: Microsoft Corporation
88
Distribution: Mariner
@@ -70,6 +70,9 @@ cp appgw-ingress %{buildroot}%{_bindir}/
7070
%{_bindir}/appgw-ingress
7171

7272
%changelog
73+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 1.4.0-26
74+
- Bump release to rebuild with golang
75+
7376
* Fri Mar 28 2025 Jyoti Kanase <[email protected]> - 1.4.0-25
7477
- Fix CVE-2024-51744
7578

‎SPECS/azcopy/azcopy.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: The new Azure Storage data transfer utility - AzCopy v10
22
Name: azcopy
33
Version: 10.25.1
4-
Release: 5%{?dist}
4+
Release: 6%{?dist}
55
License: MIT
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -67,6 +67,9 @@ go test -mod=vendor
6767
%{_bindir}/azcopy
6868

6969
%changelog
70+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 10.25.1-6
71+
- Bump release to rebuild with golang
72+
7073
* Fri Mar 28 2025 Kanishk Bansal <[email protected]> - 10.25.1-5
7174
- Patch CVE-2025-30204
7275

‎SPECS/blobfuse/blobfuse.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: FUSE adapter - Azure Storage Blobs
22
Name: blobfuse
33
Version: 1.4.5
4-
Release: 16%{?dist}
4+
Release: 17%{?dist}
55
License: MIT
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -46,6 +46,9 @@ install -p -m 755 build/blobfuse %{buildroot}%{_bindir}/
4646
%{_bindir}/blobfuse
4747

4848
%changelog
49+
* Thu Sep 04 2025 Akhila Guruju <[email protected]> - 1.4.5-17
50+
- Bump release to rebuild with golang
51+
4952
* Mon Sep 09 2024 CBL-Mariner Servicing Account <[email protected]> - 1.4.5-16
5053
- Bump release to rebuild with go 1.22.7
5154

0 commit comments

Comments
 (0)