Skip to content

overlay afterburn: update rust-openssl to 0.10.70#2721

Merged
dongsupark merged 2 commits intomainfrom
dongsu/afterburn-openssl
Mar 6, 2025
Merged

overlay afterburn: update rust-openssl to 0.10.70#2721
dongsupark merged 2 commits intomainfrom
dongsu/afterburn-openssl

Conversation

@dongsupark
Copy link
Member

@dongsupark dongsupark commented Mar 5, 2025

Apply patch for updating rust-openssl to 0.10.70, mainly for addressing CVE-2025-0977.

Pulls in coreos/afterburn#1164.

See also flatcar/Flatcar#1641.

Testing done

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/5512/cldsv/ passed

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

Apply patch for updating rust-openssl to 0.10.70, mainly for addressing
CVE-2025-0977.

Pulls in coreos/afterburn#1164.
@dongsupark dongsupark moved this from ⚒️ In Progress to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Mar 6, 2025
@dongsupark dongsupark marked this pull request as ready for review March 6, 2025 08:44
Add changelog for afterburn, updating rust-openssl to 0.10.70.
@dongsupark
Copy link
Member Author

CI passed for all cloud providers. (actually surprising)

@github-actions
Copy link

github-actions bot commented Mar 6, 2025

Build action triggered: https://github.com/flatcar/scripts/actions/runs/13694710514

@dongsupark dongsupark merged commit 47e03fe into main Mar 6, 2025
1 check failed
@github-project-automation github-project-automation bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Mar 6, 2025
@dongsupark dongsupark deleted the dongsu/afterburn-openssl branch March 6, 2025 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants