[AUTOPATCHER-CORE] Upgrade packer to 1.8.7 CVE-2023-45286 (#7081)

Co-authored-by: Bala <balakumaran.kannan@microsoft.com>
Co-authored-by: Bala <kumaran.4353@gmail.com>
Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

SPECS/packer/packer.signatures.json

@@ -1,6 +1,6 @@
 {
  "Signatures": {
-  "packer-1.8.1.tar.gz": "2a264119f7bdeeb82e79e0c9a02e4fa3d9bdf3e984c47e0c89ca2856eecb3b88",
-  "packer-1.8.1-vendor.tar.gz": "e9c56ee2307590ab771cc943eb9948c4aee3de95189eae7a1e153e999d88d704"
+  "packer-1.8.7-vendor.tar.gz": "eed09a3b326725ac419bb150c34da46b215715c3b2a8dcbe9cbb016e6ae4601f",
+  "packer-1.8.7.tar.gz": "0b3a45a3ecb0b5e993a0a39ee4599d69b58c1419cebddbfc45c61eb15389ba98"
  }
 }

SPECS/packer/packer.spec

@@ -1,7 +1,7 @@
 Summary:        Tool for creating identical machine images for multiple platforms from a single source configuration.
 Name:           packer
-Version:        1.8.1
-Release:        15%{?dist}
+Version:        1.8.7
+Release:        1%{?dist}
 License:        MPLv2.0
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -43,7 +43,8 @@ Packer is a tool for building identical machine images for multiple platforms fr
 %build
 tar --no-same-owner -xf %{SOURCE1}
 export GOPATH=%{our_gopath}
-go build -mod=vendor -v -a -o packer
+LD_FLAGS="-X github.com/hashicorp/packer/version.Version=%{version} -X github.com/hashicorp/packer/version.VersionPrerelease="
+go build -mod=vendor -v -a -o packer -ldflags="$LD_FLAGS"
 
 %install
 install -m 755 -d %{buildroot}%{_bindir}
@@ -60,6 +61,9 @@ go test -mod=vendor
 %{_bindir}/packer
 
 %changelog
+* Wed Dec 20 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.8.7-1
+- Auto-upgrade to 1.8.7 - CVE-2023-45286
+
 * Mon Oct 16 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.8.1-15
 - Bump release to rebuild with go 1.20.9
 

cgmanifest.json

@@ -15764,8 +15764,8 @@
         "type": "other",
         "other": {
           "name": "packer",
-          "version": "1.8.1",
-          "downloadUrl": "https://github.com/hashicorp/packer/archive/v1.8.1.tar.gz"
+          "version": "1.8.7",
+          "downloadUrl": "https://github.com/hashicorp/packer/archive/v1.8.7.tar.gz"
         }
       }
     },
@@ -30937,4 +30937,4 @@
     }
   ],
   "Version": 1
-}
+}