Bump supported go versions to 1.17.13, 1.18.5 to fix fifteen CVEs (#3600)

Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
This commit is contained in:
Olivia Crain 2022-08-24 11:01:02 -05:00 коммит произвёл GitHub
Родитель b4cc882c31
Коммит fdc6619ad3
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
58 изменённых файлов: 254 добавлений и 81 удалений

Просмотреть файл

@ -31,7 +31,7 @@ Distribution: Mariner
Name: %{repo}
Version: 1.18.0
Release: 3%{?dist}
Release: 4%{?dist}
Summary: A command line tool used for creating OCI Images
License: ASL 2.0
URL: https://%{name}.io
@ -146,6 +146,9 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
%{_datadir}/%{name}/test
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.18.0-4
- Bump release to rebuild against Go 1.18.5
* Tue Mar 01 2022 Pawel Winogrodzki <pawelwi@microsoft.com> - 1.18.0-3
- Fixing usage of the '%%gobuild' macro.
- License verified.

Просмотреть файл

@ -24,7 +24,7 @@
Name: %{project}-%{repo}
Version: 1.1.1
Release: 1%{?dist}
Release: 2%{?dist}
Summary: Libraries for writing CNI plugin
License: ASL 2.0 and BSD and MIT
Vendor: Microsoft Corporation
@ -129,6 +129,9 @@ install -p plugins/ipam/dhcp/systemd/cni-dhcp.socket %{buildroot}%{_unitdir}
%{_unitdir}/cni-dhcp.socket
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.1.1-2
- Bump release to rebuild against Go 1.18.5
* Fri Jul 22 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 1.1.1-1
- Upgrade version to 1.1.1.
- Updated SPEC file for compatibility with 1.1.1 version.

Просмотреть файл

@ -2,7 +2,7 @@ Vendor: Microsoft Corporation
Distribution: Mariner
Name: delve
Version: 1.5.0
Release: 3%{?dist}
Release: 5%{?dist}
Summary: A debugger for the Go programming language
License: MIT
@ -72,6 +72,12 @@ done
%changelog
* Tue Aug 23 2022 Pawel Winogrodzki <pawelwi@microsoft.com> - 1.5.0-5
- License verified.
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.5.0-4
- Bump release to rebuild against Go 1.18.5
* Thu Sep 23 2021 Pawel Winogrodzki <pawelwi@microsoft.com> - 1.5.0-3
- Initial CBL-Mariner import from CentOS 8 (license: MIT).
- Adding missing BR on 'go-rpm-macros'.

Просмотреть файл

@ -36,7 +36,7 @@
Name: podman
Version: 4.1.1
Release: 1%{?dist}
Release: 2%{?dist}
License: ASL 2.0 and BSD and ISC and MIT and MPLv2.0
Summary: Manage Pods, Containers and Container Images
Vendor: Microsoft Corporation
@ -387,6 +387,9 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/
# rhcontainerbot account currently managed by lsm5
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 4.1.1-2
- Bump release to rebuild against Go 1.18.5
* Fri Jul 22 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 4.1.1-1
- Upgrade to version 4.1.1
- Updated SPEC file with required changes for latest version compatibility.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Open Container Image manipulation tool
Name: umoci
Version: 0.4.7
Release: 1%{?dist}
Release: 2%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -39,6 +39,9 @@ go test -mod=vendor
%{_bindir}/umoci
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.4.7-2
- Bump release to rebuild against Go 1.18.5
* Mon Jul 25 2022 Tom Fay <tomfay@microsoft.com> - 0.4.7-1
- Original version for CBL-Mariner.
- License verified.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: The KeysInUse Engine for OpenSSL allows the logging of private key usage through OpenSSL
Name: KeysInUse-OpenSSL
Version: 0.3.1
Release: 1%{?dist}
Release: 2%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -78,6 +78,9 @@ if [ -e $engine_link ]; then
fi
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.3.1-2
- Bump release to rebuild against Go 1.18.5
* Fri Jun 17 2022 Maxwell Moyer-McKee <mamckee@microsoft.com> - 0.3.1-1
- Original version for CBL-Mariner
- Verified license

Просмотреть файл

@ -2,7 +2,7 @@
Summary: Application Gateway Ingress Controller
Name: application-gateway-kubernetes-ingress
Version: 1.4.0
Release: 2%{?dist}
Release: 3%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -54,6 +54,9 @@ cp appgw-ingress %{buildroot}%{_bindir}/
%{_bindir}/appgw-ingress
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.4.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.4.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: The new Azure Storage data transfer utility - AzCopy v10
Name: azcopy
Version: 10.15.0
Release: 1%{?dist}
Release: 2%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -61,6 +61,9 @@ go test -mod=vendor
%{_bindir}/azcopy
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 10.15.0-2
- Bump release to rebuild against Go 1.18.5
* Fri Jul 01 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 10.15.0-1
- Original version for CBL-Mariner.
- License verified.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: FUSE adapter - Azure Storage Blobs
Name: blobfuse
Version: 1.4.4
Release: 1%{?dist}
Release: 2%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -46,6 +46,9 @@ install -p -m 755 build/blobfuse %{buildroot}%{_bindir}/
%{_bindir}/blobfuse
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.4.4-2
- Bump release to rebuild against Go 1.18.5
* Mon Jul 25 2022 Betty Lakes <bettylakes@microsoft.com> - 1.4.4-1
- Upgrade to latest upstream version

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Automatically provision and manage TLS certificates in Kubernetes
Name: cert-manager
Version: 1.7.3
Release: 1%{?dist}
Release: 2%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -111,6 +111,9 @@ install -D -m0755 bin/webhook %{buildroot}%{_bindir}/
%{_bindir}/webhook
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.7.3-2
- Bump release to rebuild against Go 1.18.5
* Fri Aug 05 2022 Chris Gunn <chrisgun@microsoft.com> - 1.7.3-1
- Update to v1.7.3
- Split binaries into separate packages.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: The official command line client for Cloud Foundry.
Name: cf-cli
Version: 8.4.0
Release: 1%{?dist}
Release: 2%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -59,6 +59,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./out/cf
%{_bindir}/cf
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 8.4.0-2
- Bump release to rebuild against Go 1.18.5
* Fri Jun 24 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 8.4.0-1
- Original version for CBL-Mariner.
- License verified.

Просмотреть файл

@ -2,7 +2,7 @@
Summary: Container Network Interface (CNI) plugins
Name: cni-plugins
Version: 0.9.1
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -38,6 +38,9 @@ make -k check |& tee %{_specdir}/%{name}-check-log || %{nocheck}
%{_default_cni_plugins_dir}/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.9.1-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.9.1-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -24,7 +24,7 @@
Summary: Container Network Interface - networking for Linux containers
Name: cni
Version: 1.0.1
Release: 2%{?dist}
Release: 3%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -113,6 +113,9 @@ install -m 755 -d "%{buildroot}%{cni_doc_dir}"
%{_sbindir}/cnitool
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.0.1-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.0.1-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -18,7 +18,7 @@
Summary: Container native virtualization
Name: containerized-data-importer
Version: 1.51.0
Release: 1%{?dist}
Release: 2%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -196,6 +196,9 @@ install -m 0644 _out/manifests/release/cdi-cr.yaml %{buildroot}%{_datadir}/cdi/m
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.51.0-2
- Bump release to rebuild against Go 1.18.5
* Wed Aug 3 2022 Ameya Usgaonkar <ausgaonkar@microsoft.com> - 1.51.0-1
- Initial changes to build for Mariner
- License verified

Просмотреть файл

@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.8.0
Release: 7%{?dist}
Release: 8%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.8.0-8
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.8.0-7
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.8.4
Release: 6%{?dist}
Release: 7%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.8.4-7
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.8.4-6
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -3,7 +3,7 @@
Summary: Fast and flexible DNS server
Name: coredns
Version: 1.8.6
Release: 2%{?dist}
Release: 3%{?dist}
License: Apache License 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -58,6 +58,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} %{name}
%{_bindir}/%{name}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.8.6-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.8.6-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -26,7 +26,7 @@ Summary: OCI-based implementation of Kubernetes Container Runtime Interfa
# Define macros for further referenced sources
Name: cri-o
Version: 1.21.2
Release: 5%{?dist}
Release: 6%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -203,6 +203,9 @@ mkdir -p /opt/cni/bin
%{_fillupdir}/sysconfig.kubelet
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.21.2-6
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.21.2-5
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: CRI tools
Name: cri-tools
Version: 1.23.0
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -50,6 +50,9 @@ install -p -m 644 -t %{buildroot}%{_docdir}/%{name} ./docs/crictl.md
%{_docdir}/%{name}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.23.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.23.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: The command line for DC/OS
Name: dcos-cli
Version: 1.2.0
Release: 1%{?dist}
Release: 2%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -45,6 +45,9 @@ go test -mod=vendor
%{_bindir}/dcos
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.2.0-2
- Bump release to rebuild against Go 1.18.5
* Fri Jul 01 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 1.2.0-1
- Original version for CBL-Mariner.
- License verified.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: A highly-available key value store for shared configuration
Name: etcd
Version: 3.5.0
Release: 4%{?dist}
Release: 5%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -138,6 +138,9 @@ install -vdm755 %{buildroot}%{_sharedstatedir}/etcd
/%{_docdir}/%{name}-%{version}-tools/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 3.5.0-5
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 3.5.0-4
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: A highly-available key value store for shared configuration
Name: etcd
Version: 3.5.1
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -143,6 +143,9 @@ install -vdm755 %{buildroot}%{_sharedstatedir}/etcd
/%{_docdir}/%{name}-%{version}-tools/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 3.5.1-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 3.5.1-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -4,7 +4,7 @@
Summary: Simple and easy way to configure a layer 3 network fabric designed for Kubernetes
Name: flannel
Version: 0.14.0
Release: 3%{?dist}
Release: 4%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -47,6 +47,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld
%{_bindir}/flanneld
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.14.0-4
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.14.0-3
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: GitHub official command line tool
Name: gh
Version: 2.13.0
Release: 2%{?dist}
Release: 3%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -75,6 +75,9 @@ make test
%{_datadir}/zsh/site-functions/_gh
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 2.13.0-3
- Bump release to rebuild against Go 1.18.5
* Mon Jul 05 2022 Daniel McIlvaney <damcilva@microsoft.com> - 2.13.0-2
- Bump release due to bump in fish to 3.5.0.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Vendor Package Management for Golang
Name: glide
Version: 0.13.3
Release: 11%{?dist}
Release: 12%{?dist}
License: MIT
URL: https://github.com/Masterminds/glide
# Source0: https://github.com/Masterminds/%{name}/archive/v%{version}.tar.gz
@ -53,6 +53,9 @@ popd
%{_bindir}/glide
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.13.3-12
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.13.3-11
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Converts markdown into roff (man pages)
Name: go-md2man
Version: 2.0.1
Release: 8%{?dist}
Release: 9%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -48,6 +48,9 @@ cp go-md2man-%{version}/LICENSE.md %{buildroot}%{_docdir}/%{name}-%{version}/LIC
%{_bindir}/go-md2man
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 2.0.1-9
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 2.0.1-8
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -2,7 +2,7 @@
Summary: Introspection system for GObject-based libraries
Name: gobject-introspection
Version: %{BaseVersion}.0
Release: 2%{?dist}
Release: 3%{?dist}
License: GPLv2+ AND LGPLv2+ AND MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -98,6 +98,9 @@ find %{buildroot} -type f -name "*.la" -delete -print
%{_mandir}/man1/*.gz
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.71.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.71.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,6 +1,6 @@
{
"Signatures": {
"go1.17.10.src.tar.gz": "299e55af30f15691b015d8dcf8ecae72412412569e5b2ece20361753a456f2f9",
"go1.17.13.src.tar.gz": "a1a48b23afb206f95e7bbaa9b898d965f90826f6f1d1fc0c1d784ada0cd300fd",
"go1.4-bootstrap-20171003.tar.gz": "f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52"
}
}

Просмотреть файл

@ -12,7 +12,7 @@
%define __find_requires %{nil}
Summary: Go
Name: golang
Version: 1.17.10
Version: 1.17.13
Release: 1%{?dist}
License: BSD
Vendor: Microsoft Corporation
@ -116,6 +116,12 @@ fi
%{_bindir}/*
%changelog
* Fri Aug 19 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.17.13-1
- Upgrade to version 1.17.13 to fix CVE-2022-29526, CVE-2022-30634,
CVE-2022-30629, CVE-2022-30580, CVE-2022-29804, CVE-2022-1705,
CVE-2022-1962, CVE-2022-28131, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632,
CVE-2022-30633, CVE-2022-30635, CVE-2022-32148, and CVE-2022-32189
* Tue Apr 12 2022 Muhammad Falak <mwani@microsoft.com> - 1.17.10-1
- Bump version to 1.17.10 to address CVE-2021-44716

Просмотреть файл

@ -1,6 +1,6 @@
{
"Signatures": {
"go1.18.3.src.tar.gz": "0012386ddcbb5f3350e407c679923811dbd283fcdc421724931614a842ecbc2d",
"go1.18.5.src.tar.gz": "9920d3306a1ac536cdd2c796d6cb3c54bc559c226fc3cc39c32f1e0bd7f50d2a",
"go1.4-bootstrap-20171003.tar.gz": "f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52"
}
}

Просмотреть файл

@ -12,7 +12,7 @@
%define __find_requires %{nil}
Summary: Go
Name: golang
Version: 1.18.3
Version: 1.18.5
Release: 1%{?dist}
License: BSD
Vendor: Microsoft Corporation
@ -116,6 +116,11 @@ fi
%{_bindir}/*
%changelog
* Fri Aug 19 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.18.5-1
- Upgrade to version to fix CVE-2022-1705, CVE-2022-1962, CVE-2022-28131,
CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635,
CVE-2022-32148, and CVE-2022-32189
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.18.3-1
- Bump version to 1.18.3 to address CVE-2022-24675 & CVE-2022-28327

Просмотреть файл

@ -2,7 +2,7 @@
Name: helm
Version: 3.9.3
Release: 1%{?dist}
Release: 2%{?dist}
Summary: The Kubernetes Package Manager
Group: Applications/Networking
License: Apache 2.0
@ -52,6 +52,9 @@ install -m 755 ./helm %{buildroot}%{_bindir}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 3.9.3-2
- Bump release to rebuild against Go 1.18.5
* Mon Aug 22 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> 3.9.3-1
- Update helm version to 3.9.3
- Fix version info not displaying correct version.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Command line tool for working with Jenkins X.
Name: jx
Version: 3.2.236
Release: 1%{?dist}
Release: 2%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -60,6 +60,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./build/jx
%{_bindir}/jx
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 3.2.236-2
- Bump release to rebuild against Go 1.18.5
* Wed Jun 22 2022 Suresh Babu Chalamalasetty <schalam@microsoft.com> - 3.2.236-1
- Original version for CBL-Mariner.
- License verified.

Просмотреть файл

@ -7,7 +7,7 @@
Name: k3s
Version: 1.23.6
Release: 3%{?dist}
Release: 4%{?dist}
Summary: Lightweight Kubernetes
Group: System Environment/Base
@ -83,6 +83,9 @@ exit 0
%{install_sh}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.23.6-4
- Bump release to rebuild against Go 1.18.5
* Thu Jul 21 2022 Lior Lustgarten <lilustga@microsoft.com> 1.23.6-3
- Fixes the install section. Allows integration of k3s at runtime in the Mariner build environment.
* Wed Jun 29 2022 Lior Lustgarten <lilustga@microsoft.com> 1.23.6-2

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Kubernetes-based Event Driven Autoscaling
Name: keda
Version: 2.4.0
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -55,6 +55,9 @@ cp ./bin/keda-adapter %{buildroot}%{_bindir}
%{_bindir}/%{name}-adapter
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 2.4.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 2.4.0-2
- Bump release to rebuild with golang 1.18.3
- License verified

Просмотреть файл

@ -20,7 +20,7 @@
Summary: Container native virtualization
Name: kubevirt
Version: 0.51.0
Release: 1%{?dist}
Release: 2%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -205,6 +205,9 @@ install -p -m 0644 cmd/virt-handler/ipv6-nat.nft %{buildroot}%{_datadir}/kube-vi
%{_bindir}/virt-tests
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.51.0-2
- Bump release to rebuild against Go 1.18.5
* Thu Jul 14 2022 Kanika Nema <kanikanema@microsoft.com> - 0.51.0-1
- License verified
- Initial changes to build for Mariner

Просмотреть файл

@ -25,7 +25,7 @@
Summary: Kubernetes daemonset to perform safe automatic node reboots
Name: kured
Version: 1.9.1
Release: 2%{?dist}
Release: 3%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -122,6 +122,9 @@ sed -i -e 's|image: .*|image: registry.opensuse.org/kubic/kured:%{version}|g' %{
%{_datarootdir}/k8s-yaml/kured/kured.yaml
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.9.1-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.9.1-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -25,7 +25,7 @@
Summary: Access and modify virtual machine disk images
Name: libguestfs
Version: 1.44.0
Release: 6%{?dist}
Release: 7%{?dist}
License: LGPLv2+
Vendor: Microsoft Corporation
Distribution: Mariner
@ -1235,6 +1235,9 @@ rm ocaml/html/.gitignore
%endif
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.44.0-7
- Bump release to rebuild against Go 1.18.5
* Tue Apr 05 2022 Pawel Winogrodzki <pawelwi@microsoft.com> - 1.44.0-6
- License verified.
- Making BR on "po4a" conditional.

Просмотреть файл

@ -4,7 +4,7 @@
Summary: NVIDIA container runtime library
Name: libnvidia-container
Version: 1.9.0
Release: 2%{?dist}
Release: 3%{?dist}
License: BSD AND ASL2.0 AND GPLv3+ AND LGPLv3+ AND MIT AND GPLv2
Vendor: Microsoft Corporation
Distribution: Mariner
@ -132,6 +132,9 @@ This package contains command-line tools that facilitate using the library.
%{_bindir}/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.9.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.9.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -5,7 +5,7 @@ Summary: A Docker CLI plugin for extended build capabilities with BuildKi
Name: moby-%{upstream_name}
# update "commit_hash" above when upgrading version
Version: 0.7.1
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
Group: Tools/Container
Vendor: Microsoft Corporation
@ -42,6 +42,9 @@ cp -aT buildx "%{buildroot}/%{_libexecdir}/docker/cli-plugins/docker-buildx"
%{_libexecdir}/docker/cli-plugins/docker-buildx
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.7.1-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.7.1-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -4,7 +4,7 @@
Summary: The open-source application container engine client.
Name: moby-%{upstream_name}
Version: 20.10.12
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
Group: Tools/Container
URL: https://github.com/docker/cli
@ -80,6 +80,9 @@ install -p -m 644 contrib/completion/fish/docker.fish %{buildroot}%{_datadir}/fi
%{_datadir}/fish/vendor_completions.d/docker.fish
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 20.10.12-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 20.10.12-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -5,7 +5,7 @@
Summary: Industry-standard container runtime
Name: moby-%{upstream_name}
Version: 1.6.6
Release: 1%{?dist}
Release: 2%{?dist}
License: ASL 2.0
Group: Tools/Container
URL: https://www.containerd.io
@ -85,6 +85,9 @@ fi
%config(noreplace) %{_sysconfdir}/containerd/config.toml
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.6.6-2
- Bump release to rebuild against Go 1.18.5
* Thu Jun 23 2022 Henry Beberman <henry.beberman@microsoft.com> - 1.6.6-1
- Bump version to 1.6.6 to address CVE-2022-31030

Просмотреть файл

@ -4,7 +4,7 @@
Summary: The open-source application container engine
Name: %{upstream_name}-engine
Version: 20.10.12
Release: 4%{?dist}
Release: 5%{?dist}
License: ASL 2.0
Group: Tools/Container
URL: https://mobyproject.org
@ -125,6 +125,9 @@ fi
%{_unitdir}/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 20.10.12-5
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 20.10.12-4
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -5,7 +5,7 @@ Summary: CLI tool for spawning and running containers per OCI spec.
Name: moby-%{upstream_name}
# update "commit_hash" above when upgrading version
Version: 1.1.2
Release: 2%{?dist}
Release: 3%{?dist}
License: ASL 2.0
URL: https://github.com/opencontainers/runc
Group: Virtualization/Libraries
@ -57,6 +57,9 @@ make install-man DESTDIR="%{buildroot}" PREFIX="%{_prefix}"
%{_mandir}/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.1.2-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.1.2-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -2,7 +2,7 @@
Summary: Node Managed Identity
Name: nmi
Version: 1.8.7
Release: 2%{?dist}
Release: 3%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -63,6 +63,9 @@ popd
%{_bindir}/%{name}
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.8.7-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.8.7-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Kubernetes daemon to detect and report node issues
Name: node-problem-detector
Version: 0.8.10
Release: 3%{?dist}
Release: 4%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -66,6 +66,9 @@ make test
%config(noreplace) %{_sysconfdir}/node-problem-detector.d/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.8.10-4
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.8.10-3
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -2,7 +2,7 @@
Summary: NVIDIA container runtime hook
Name: nvidia-container-toolkit
Version: 1.9.0
Release: 2%{?dist}
Release: 3%{?dist}
License: ALS2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -76,6 +76,9 @@ rm -f %{_bindir}/nvidia-container-runtime-hook
%{_datadir}/containers/oci/hooks.d/oci-nvidia-hook.json
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.9.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.9.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -5,7 +5,7 @@
Summary: Open source, general-purpose policy engine
Name: opa
Version: 0.31.0
Release: 2%{?dist}
Release: 3%{?dist}
# Upstream license specification: MIT and Apache-2.0
# Main package: ASL 2.0
# internal/jwx: MIT
@ -63,6 +63,9 @@ install -D -p -m 0644 _man/* %{buildroot}%{_mandir}/man1/
%{_bindir}/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.31.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.31.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Tool for creating identical machine images for multiple platforms from a single source configuration.
Name: packer
Version: 1.8.1
Release: 2%{?dist}
Release: 3%{?dist}
License: MPLv2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -60,6 +60,9 @@ go test -mod=vendor
%{_bindir}/packer
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.8.1-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.8.1-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -5,7 +5,7 @@
Summary: Exporter for machine metrics
Name: prometheus-node-exporter
Version: 1.3.1
Release: 8%{?dist}
Release: 9%{?dist}
# Upstream license specification: Apache-2.0
License: ASL 2.0 AND MIT
Vendor: Microsoft Corporation
@ -107,6 +107,9 @@ getent passwd 'prometheus' >/dev/null || useradd -r -g 'prometheus' -d '%{_share
%dir %attr(0755,prometheus,prometheus) %{_sharedstatedir}/prometheus/node-exporter
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.3.1-9
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.3.1-8
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -5,7 +5,7 @@
Summary: Prometheus exporter exposing process metrics from procfs
Name: prometheus-process-exporter
Version: 0.7.10
Release: 2%{?dist}
Release: 3%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -97,6 +97,9 @@ getent passwd 'prometheus' >/dev/null || useradd -r -g 'prometheus' -d '%{_share
%dir %attr(0755,prometheus,prometheus) %{_sharedstatedir}/prometheus
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 0.7.10-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 0.7.10-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -3,7 +3,7 @@
Name: prometheus
Version: 2.36.0
Release: 2%{?dist}
Release: 3%{?dist}
Summary: Prometheus monitoring system and time series database
Vendor: Microsoft Corporation
Distribution: Mariner
@ -142,6 +142,9 @@ fi
%attr(0755,prometheus,prometheus) %{_sharedstatedir}/prometheus
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 2.36.0-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 2.36.0-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -19,7 +19,7 @@
Summary: Orchestrator for distributed storage systems in cloud-native environments
Name: rook
Version: 1.6.2
Release: 2%{?dist}
Release: 3%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -248,6 +248,9 @@ sed -i -e "s|\(.*tag: \)VERSION|\1%{helm_appVersion}|" %{values_yaml}
# bother adding docs or changelog or anything
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.6.2-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.6.2-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Inspect container images and repositories on registries
Name: skopeo
Version: 1.9.1
Release: 1%{?dist}
Release: 2%{?dist}
License: Apache-2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -46,6 +46,9 @@ make test-unit-local
%{_mandir}/man1/%%{name}*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.9.1-2
- Bump release to rebuild against Go 1.18.5
* Tue Jul 26 2022 Tom Fay <tomfay@microsoft.com> - 1.9.1-1
- Original version for CBL-Mariner.
- License verified.

Просмотреть файл

@ -1,7 +1,7 @@
Summary: agent for collecting, processing, aggregating, and writing metrics.
Name: telegraf
Version: 1.23.0
Release: 1%{?dist}
Release: 2%{?dist}
License: MIT
Vendor: Microsoft Corporation
Distribution: Mariner
@ -90,6 +90,9 @@ fi
%dir %{_sysconfdir}/%{name}/telegraf.d
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.23.0-2
- Bump release to rebuild against Go 1.18.5
* Thu Jun 16 2022 Muhammad Falak <mwani@microsoft.com> 1.23.0-1
- Bump version to 1.23.0

Просмотреть файл

@ -1,7 +1,7 @@
Summary: Infrastructure as code deployment management tool
Name: terraform
Version: 1.2.2
Release: 2%{?dist}
Release: 3%{?dist}
License: MPLv2.0
Vendor: Microsoft Corporation
Distribution: Mariner
@ -57,6 +57,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./terraform
%{_bindir}/terraform
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 1.2.2-3
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 1.2.2-2
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -3,7 +3,7 @@
Name: vitess
Version: 8.0.0
Release: 4%{?dist}
Release: 5%{?dist}
Summary: Database clustering system for horizontal scaling of MySQL
# Upstream license specification: MIT and Apache-2.0
License: MIT and ASL 2.0
@ -107,6 +107,9 @@ go check -t go/cmd \
%{_bindir}/*
%changelog
* Mon Aug 22 2022 Olivia Crain <oliviacrain@microsoft.com> - 8.0.0-5
- Bump release to rebuild against Go 1.18.5
* Tue Jun 14 2022 Muhammad Falak <mwani@microsoft.com> - 8.0.0-4
- Bump release to rebuild with golang 1.18.3

Просмотреть файл

@ -4030,8 +4030,8 @@
"type": "other",
"other": {
"name": "golang",
"version": "1.17.10",
"downloadUrl": "https://golang.org/dl/go1.17.10.src.tar.gz"
"version": "1.17.13",
"downloadUrl": "https://golang.org/dl/go1.17.13.src.tar.gz"
}
}
},
@ -4040,8 +4040,8 @@
"type": "other",
"other": {
"name": "golang",
"version": "1.18.3",
"downloadUrl": "https://golang.org/dl/go1.18.3.src.tar.gz"
"version": "1.18.5",
"downloadUrl": "https://golang.org/dl/go1.18.5.src.tar.gz"
}
}
},
@ -11738,16 +11738,6 @@
}
}
},
{
"component": {
"type": "other",
"other": {
"name": "mlocate",
"version": "0.26",
"downloadUrl": "http://releases.pagure.org/mlocate/mlocate-0.26.tar.xz"
}
}
},
{
"component": {
"type": "other",
@ -11768,6 +11758,16 @@
}
}
},
{
"component": {
"type": "other",
"other": {
"name": "mlocate",
"version": "0.26",
"downloadUrl": "http://releases.pagure.org/mlocate/mlocate-0.26.tar.xz"
}
}
},
{
"component": {
"type": "other",
@ -22829,16 +22829,6 @@
}
}
},
{
"component": {
"type": "other",
"other": {
"name": "reaper",
"version": "3.1.1",
"downloadUrl": "https://github.com/thelastpickle/cassandra-reaper/archive/refs/tags/3.1.1.tar.gz"
}
}
},
{
"component": {
"type": "other",
@ -22959,6 +22949,16 @@
}
}
},
{
"component": {
"type": "other",
"other": {
"name": "reaper",
"version": "3.1.1",
"downloadUrl": "https://github.com/thelastpickle/cassandra-reaper/archive/refs/tags/3.1.1.tar.gz"
}
}
},
{
"component": {
"type": "other",