Граф коммитов

41 Коммитов

Автор SHA1 Сообщение Дата
alejandro-microsoft 1c06c17b69
Ruby CVE-2024-41946: upgrade ruby version to 3.3.3 (#10089) 2024-08-13 15:33:03 -07:00
Neha Agarwal 8edc9a62d1
rubygem-rexml: fix CVE-2024-35176 (#9195) 2024-05-23 12:22:55 -07:00
Riken Maharjan dd044d4f7e
update rb-rdkafka (#8644) 2024-04-02 07:02:20 -07:00
Dan Streetman 710cff00c4
tree-wide: change %{with_check} to 0%{?with_check} (#8088) 2024-02-27 12:23:38 -05:00
Muhammad Falak R Wani 6359c27c2d
treewide: *.spec: switch Distribution to Azure Linux (#7606)
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2024-02-06 12:14:23 -08:00
Pawel Winogrodzki 32819b616b
Updated `async` and `async-http` Ruby gems. (#7528)
Co-authored-by: CBL-Mariner Servicing Account <cblmargh@microsoft.com>
2024-01-30 09:42:57 -08:00
Pawel Winogrodzki 46cdbfb9b9
Upgraded `ruby` to 3.3.0. (#7495) 2024-01-29 10:57:45 -08:00
Muhammad Falak R Wani 6a493709c8
*.signatures.json: add a newline EOF to files that do not have one (#7147)
This is an automated change & the command used is:
find -name '*.signatures.json' -exec sh -c '[ -n "$(tail -c1 {})" ] && echo >> {}' \;

Reference: https://stackoverflow.com/a/729795
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2024-01-11 14:58:09 +05:30
jslobodzian eb08b37916
Bump package version to recompile binaries with fixed gcc stack prote… (#6253)
* Bump package version to recompile binaries with fixed gcc stack protection (CVE-2023-4039)

* Bump debuginfo versions in toolchain manifests

* Bump kernel headers to match kernel

* Update SPECS/gettext/gettext.spec

Taking suggestion

Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

* Update for code review comments

* Fix for code review comment in qt5-qtdeclarative changelog

* Fix dash version for signed spec files

---------

Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-09-21 17:10:15 -04:00
Saul Paredes b2989bc023
Update ruby default uri to 0.12.2 and bundled uri to 0.10.3 and fix CVE-2023-36617 (#5992)
* Patch ruby-uri version and fix CVE-2023-36617

* add patch comment

* take complete patch that actually fixes CVE

* Update default uri to 0.12.2, patch bundled uri and fix CVE-2023-36617

* Add comment to patch

* Also bump bundled uri version
2023-08-16 14:35:23 -07:00
Rakshaa Viswanathan 38fd642353
Upgrade ruby-time to v0.2.2 and ruby-uri to v0.11.1 to resolve CVE-20… (#5448)
* Upgrade ruby-time to v0.2.2 and ruby-uri to v0.11.1 to resolve CVE-2023-28756 and CVE-2023-28755

* Upgrade ruby to 3.1.4 to fix provides

* Update cgmanifest

* Upgrade freetype to 2.13.0 to fix CVE-2023-2004

* Revert "Upgrade freetype to 2.13.0 to fix CVE-2023-2004"

This reverts commit 116fa00495.

* Revert upgrade freetype and update changelog

* Upgrade time to 0.2.2 and uri to 0.11.1

* Upgrade ruby to 3.1.4

* Update signatures for ruby v3.1.4

* Update version to 3.1.4 in %licence COPYING section
2023-05-09 10:54:46 +05:30
Daniel McIlvaney ce89718cc5
Fix rubygem-bundler provides with obsoletes (#4452)
* Fix rubygem-bundler provides with obsoletes

* Only obsolete package, not capability
2022-12-14 13:00:01 -08:00
Daniel McIlvaney 33eb53acc2
Upgrade ruby to version 3.1.3 to resolve CVE-2021-33621 (#4434)
* Upgrade ruby to 3.1.3 to resolve CVE-2021-33621
2022-12-14 08:42:28 -08:00
Neha Agarwal 1bf312be32
ruby: remove bundled gems, add provides for default gems (#3035)
* remove bundled gems from ruby, remove spec of default

* provide default gems within ruby

* Add rake executable

* Cleanup

* Remove bundled molinillo

* Cleanup removing bundled gems

* Fix typo in versions

* Incorporate comments

* Remove ssh-key, add back cgmanifest

* Remove provides for bundler, bigdecimal

* License map, fix errors

* Incorporate comments

* fix comment, try removing patch

* Remove patches, fix license

* Fix map again

* Cleanup changelog
2022-06-03 16:23:15 -07:00
Pawel Winogrodzki 204f6ea3a1
[main] Removing conflicting separate `rubygem-X` specs. (#2851)
* Removing separate 'rubygem-rake' package.

* Removing separate 'power_assert' and 'test-unit' gems.

* Removing separate 'rubygem-minitest'.
2022-04-22 22:48:40 -07:00
Neha Agarwal c9bde1095a
Upgrade ruby to v3.1.2, fix CVE 2021-41817,2021-41819, build gems separately (#2777)
* Upgrade ruby to 3.1.2, fix CVE 2021-41817,2021-41819, build gems separately

* Fix errors

* Add description credit, linting

* fix names in requires, fix map

* Fix map again
2022-04-19 11:28:14 -07:00
Pawel Winogrodzki 152cb2065e
[main] Fixing Ruby packages builds. (#2726) 2022-04-14 13:46:21 -07:00
Olivia Crain 8642697618
ruby: Do not store certain compiler flags for extension building (#2715) 2022-04-12 16:21:25 -07:00
Pawel Winogrodzki f516cf3344
[main] Adjusting 'ruby' provides across subpackages. (#2615) 2022-03-30 14:08:16 -07:00
Neha Agarwal 2cae79fa79
Build rubygems with ruby to fix build error in pipeline (#2601)
* Add rubygems to build with ruby to fix build error in pipeline

* Remove bundler requirement
2022-03-28 12:26:09 -07:00
Neha Agarwal 8639862b8f
ruby: bump rubygem-bundler to v2.3.8, build gems from source (#2509)
* Update ruby to v2.7.4, build rubygems with ruby

* Build gems in ruby

* build rubygems from source

* fix checks

* remove extra rubygems, fix cgmanifest

* Fix license and cgmanifest

* fix license file, remove deleted rubygems

* Incorporate comments

* Fix license, incorporate comments

* Fix license newline at end
2022-03-24 14:04:32 -07:00
Andrew Phelps 931a59431f
Update autoconf, krb5, ruby (#2447)
* upgrade autoconf and krb5

* fix changelog

* add patch to fix heimdal autoconf issue

* update ruby

* remove rubygem changes

* restore bigdecimal_version

* fix ruby archdir
2022-03-09 17:45:32 -08:00
jslobodzian 17b0e93e71
Merge 1.0 to dev branch
This merge brings the latest SELinux and many packages and CVE fixes from the 1.0 branch.
2021-08-19 13:46:51 -07:00
Thomas Crain d61d4257fb
Install ruby's json library as a gem (#1129) 2021-07-13 11:21:49 -07:00
Thomas Crain 13f6c96776 Various build fixes 2021-05-05 10:04:00 -05:00
Thomas Crain eae5b4006f Merge branch '1.0' into thcrain/ever-given 2021-04-06 22:39:22 -05:00
Henry Li fb6e6f6d7e
[dev] Update ruby spec (#771)
* update ruby gem execute installation

* update changelog

* update changelog

* use macros for directory

Co-authored-by: Henry Li <lihl@microsoft.com>
2021-03-22 10:54:28 -07:00
Henry Li 8942456119
[dev] Upgrade and modify ruby and rubygem-bundler (#744)
* additional test to python3

* revert changes to python3

* modify ruby and rubygem-bundler

* fix linting and package manifest

Co-authored-by: Henry Li <lihl@microsoft.com>
2021-03-15 10:10:44 -07:00
Joe Schmitt ef3343d9fd
[dev] Update lib macro and enable python byte compilation (#636) 2021-02-16 10:34:30 -08:00
Henry Li 22c2ecfca4
Merge pull request #523 from microsoft/joslobo/td-agent-fix
Add td-agent to Mariner Core
2021-01-19 10:35:41 -08:00
Andrew Phelps 1758eea20f
Fix ruby tests and disable asciidoc and ipv6calc tests (#541)
* fix ruby tests

* skip asciidoc and ipv6calc tests
2021-01-14 22:36:16 -08:00
Henry Li 0f1a9ca9ae fix comments 2021-01-12 11:12:22 -08:00
Henry Li 39490f9843 fix linting and manifest 2021-01-08 15:34:02 -08:00
Henry Li 4825fa3e47 refactor td-agent implementation 2021-01-08 12:26:00 -08:00
Joe Schmitt 69947fd154
[dev] Add additional provides and compatibility links (#510) 2021-01-05 14:54:23 -08:00
Henry Li 99a5dcfc60 enable fluentd, jemalloc and update ruby; temporarily save the changes 2020-12-18 11:30:06 -08:00
Pawel Winogrodzki 655e368366
Unblocking `ruby` test from being run. (#408) 2020-11-30 16:49:46 -08:00
Thomas Crain 4239db8249
Patch CVE-2020-25613 in ruby (#268)
* Patch CVE-2020-25613 in ruby

* Fix patch
2020-11-04 06:23:04 -08:00
Andrew Phelps 498f926e43
merge 1.0 into dev (#299)
* Update trademark section of the readme

Signed-off-by: Jim Perrin <Jim.Perrin@microsoft.com>

* Update building.md (#104)

* add wants=sshd-keygen.service to sshd (#58)

* add wants=sshd-keygen.service to sshd

Signed-off-by: Jim Perrin <Jim.Perrin@microsoft.com>

* modify signatures.json and bump release for pr

Signed-off-by: Jim Perrin <Jim.Perrin@microsoft.com>

* Fix libffi normal package build (#116)

* Fix libffi normal package build

* Add comment explaining the purpose of the sed call

* Upgrade golang to 1.13.15 (#93)

* Adding a small build tip to the quick start instructions. (#123)

* Add cloud-init-vmware-guestinfo package (#124)

* Add cloud-init-vmware-guestinfo package

* Updating 'ca-certificates' nssckbi.h header and unifying changelog entries with package version (#125)

* Updating changelog to be consistent with package version.

* Fixing missed update to 'nssckbi.h'.

* Updating manifests.

* Updating signatures.

* Markdown lint-induced clean-up of doc files. (#122)

* Makrdownlint-induced clean-up.

* Removing redundant lines.

* Removing redundant lines 2.

* Add  IMA feature to the kernel, add config for it (#135)

* Add  IMA feature to the kernel, add config for it

- Add IMA measurement configs to the x86_64, and aarch64 kernel configs (IMA_APPRAISE currently disabled).
- Add KernelCommandLine config field to control IMA, and allow additional configs to be passed.

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>
Co-authored-by: Christopher Co <christopher.co@microsoft.com>

* Update tpm2 tools to 4.2, tss to 2.4.0 (#134)

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Enable Mellanox kernel configs

* Update tpm2-abrmd to 2.3.3 (#144)

* Update tpm2-abrmd to 2.3.3

* Create quickstart.yml (#119)

This patch adds a GitHub Action to verify our Quickstart instructions

* Nopatch httpd CVE-1999-0236, CVE-1999-1412 (#148)

* Nopatch httpd CVE-1999-0236, CVE-1999-1412

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Nopatch groff CVE-2000-0803 (#149)

* Nopatch groff CVE-2000-0803

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Nopatch apparmor CVE-2016-1585 (#150)

* Nopatch apparmor CVE-2016-1585

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Nopatch qemu CVE-2016-7161 (#152)

* Nopatch qemu CVE-2016-7161

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Nopatch lua CVE-2020-15889 (#153)

* nopatch lua CVE-2020-15889

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Nopatch unzip CVE-2008-0888 (#154)

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* full: Always install the default kernel (#132)

Currently, when installing CBL-Mariner via ISO, the ISO will
install the standard kernel package or the kernel-hyperv package
depending on if installing on HyperV VM or not.

The HyperV kernel is still under evaluation so use the standard kernel
package across the board.

* Support downloading preview SRPMs (#160)

Replace SRPM_URL* with SRPM_URL_LIST

* Patch CVE-2020-14342 in cifs-utils

* Replace mariner-repos's %post script as %posttrans

- After looking at here, it shows that %post script for a new version runs before the %preun script for an old version. Which means, after an upgrade, the keys would be removed by the older version: https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#ordering

* Update pkggen_core_aarch64.txt

* Update pkggen_core_x86_64.txt

* Update toolchain_aarch64.txt

* Update toolchain_x86_64.txt

* Add a more verbose changelog

* Remove chrony-wait as a boot service dependency (#166)

* Remove chrony-wait as a boot service dependency

* Add cgmanifest entry for chrony

* Address changelog and prep section comments

* initramfs: Regenerate initrd using host-only mode on file-based trigger (#170)

* initramfs: Always use host-only mode

kdump currently uses the host system's initrd when enrolling a crash kernel
and initrd. There is a limitation where the kdump initrd must be generated
with dracut in "host-only" mode.

The -k option forces a host-only initrd build.
The -q option suppresses verbose output

If mkinitrd is called without <image> and <kernel-version> parameters, it will
default to calling dracut in "host-mode" mode on every kernel version it can
find in /boot.

If mkinitrd is called with <image> and <kernel-version> parameters, it will
default to calling dracut in "generic host" mode for rebuilding the specific
initrd. Therefore we need to make sure to add the -k option when invoking
mkinitrd with an explicit <image> and <kernel version>

* Reword comment block

* Fix kernel specs' %postun scripts (#164)

* Fix `kernel.spec`'s `%postun` script

* Fix `kernel-signed-aarch64`'s `%postun` script

* Fix kernel-signed-x64.spec's %postun script

* Fix kernel-hyperv.spec's %postun script

* Adding new 'preview' repository. (#146)

* Adding new 'preview' repository.

* Addressing comments.

* Fix kernel aarch64 package build break due to missing CONFIG_IMA_KEXEC (#171)

* Fix kernel aarch64 package build break due to missing CONFIG_IMA_KEXEC (#171)

* Update fontconfig to 2.13.91 (#175)

* Extending 'strongswan' test timeout. (#173)

* Fix CVE-2020-14342 patch to not depend on PATH

* installutils: Supply blank /etc/machine-id file (#147)

From https://www.freedesktop.org/software/systemd/man/machine-id.html:
For operating system images which are created once and used on multiple
machines, for example for containers or in the cloud, /etc/machine-id
should be an empty file in the generic file system image. An ID will be
generated during boot and saved to this file if possible.

* installutils: Remove root password expiry when no root user is specified in imageconfig file (#161)

* Add SELinux packages to Mariner. (#100)

* Add SELinux packages to Mariner.

This commit add the following packages to Mariner to provide basic
SELinux support:

- checkpolicy
- libsemanage
- mcstrans
- policycoreutils
- secilc
- selinux-policy
- setools

The selinux-policy provided here is a generic base policy, which is not
specifically tuned for Mariner, therefore only permissive mode support
is enabled in this commit.  (Although users could load a custom policy
to run in enforcing mode).  Future phases have been discussed to add
SELinux enforcing mode support.

This commit does not enable SELinux by default.  In order to enable
SELinux support, one must first install necessary packages (libselinux,
policycoreutils, secilc, selinux-policy), and then append "lsm=selinux
selinux=1" to the kernel command line.  This will trigger an initial
boot to relabel the system, at which point the system will reboot, and
boot into an SELinux enabled system.  SELinux state can be queried with
the "getenforce" command line tool.  If SELinux has not been enabled, it
will report "Disabled" (the default).  If SELinux support has been
enabled as described in this paragraph, it will report "permissive".

This commit also modifies the following packages to enabled SELinux
functionality in existing packages:

- coreutils
- cronie
- dbus
- openssh
- pam
- rpm
- shadow-utils
- systemd
- util-linux

This enables them to build with SELinux support so that when SELinux is
enabled, they have SELinux related functionality available.

Because coreutils is a basic package and requires building with
libselinux-devel present in order to enable key SELinux functionality,
several dependencies in other packages that rely on coreutils (namely
python2, python3 and systemd-bootstrap) had to be removed in order to
avoid circular dependencies.  There does not appear to be a functional
impact from this change based on my testing.

* Remove "::set-env" commands in GitHub Actions (#178)

* Adding a .nopatch for CVE-2007-0086. (#176)

* Updating cert bundle paths. (#181)

* Updating cert bundle paths.

* Updating cgmanifest.json.

* Adding the `gflags` and `rocksdb` packages. (#183)

* Adding the 'rocksdb' package.

* Adding the 'gflags' package.

* Add missing %libsepolver definition in secilc.spec (#192)

* Removing 'TERMINAL_ISO_INSTALLER' from the docs. (#189)

* Add architecture at the end of toolkit archive (#182)

- Also add `version.txt` file in the toolkit archive as an easy way to verify toolkit version.

* Adding a missing '%{?dist}' tag. (#195)

* enable fetching RPMs from pacakges.microsoft.com for Docker based build (#198)

* Update README.md (#180)

* Update README.md (#180)

* Build Break Fix:  Rollback selinux checkins.   (#204)

* Revert "Add missing %libsepolver definition in secilc.spec (#192)"

This reverts commit 9cff088bec.

* Revert "Add SELinux packages to Mariner. (#100)"

This reverts commit b2d918efac.

* Natively support pulling from the preview repo (#199)

* Fix CVE-2020-26159 in oniguruma (#211)

* Fix CVE-2020-26159

* Increment release, fix autosetup.

* Adding the 'syslog-ng' package. (#205)

* Adding the 'tinyxml2' package. (#206)

* Adding the 'toml11' package. (#207)

* Adding the 'tracelogging' and 'zipper' packages. (#208)

* Add mm-common and libxml++ packages (#215)

* Add liblogging package (#214)

* Add nlohmann-json package (#217)

* Add msgpack package (#216)

* Adding the 'span-lite' and 'telegraf' packages. (#220)

* Remove toolchain-local-wget-list after use (#212)

* Remove toolchain-local-wget-list after use

- toolchain-local-wget-list has been left at the end of a toolchain build. It shows up on `git status` whene toolchain is built locally.
- Another solution would be adding it to `.gitignore`.

* Add temporary toolchain build files to toolkit/.gitignore

* Remove implicit git repository dependency from toolkit (#197)

* Remove implicit git repository dependency

* Remove the new GIT_REV variable

* Add jsonbuilder package (#223)

* update libffi to use https source0 (#227)

* Update libestr (#213)

* Add babeltrace2 and lttng-consume packages (#226)

* Add pugixml package (#222)

* Disable debug package for nlohmann-json (#228)

* Add rapidjson package (#225)

* Upgrade ruby to 2.6.6 to resolve CVE-2019-16255, CVE-2019-16201, CVE-2020-10933, CVE-2020-5247, CVE-2019-15845, CVE-2019-16254 (#224)

* Upgrade ruby to 2.6.6 to resolve CVEs

* Update cgmanifest

* Nopatch qemu CVE-2015-7504 CVE-2017-5931 CVE-2017-14167 (#162)

* Fix CVE-2020-26159 in oniguruma (#211)

* Fix CVE-2020-26159

* Increment release, fix autosetup.

* Enable QAT kernel configs in CBL-Mariner

* Nopatch kernel CVE-2020-10757, CVE-2020-12653, CVE-2020-12657, CVE-2010-3865, CVE-2020-11668, CVE-2020-12654, CVE-2020-24394, CVE-2020-8428 (#193)

* Address CVE-2020-10757, CVE-2020-12653, CVE-2020-12657, CVE-2010-3865, CVE-2020-11668, CVE-2020-12654, CVE-2020-24394, CVE-2020-8428

* Adding the `bond`, `fluent-bit`, and `ivykis` packages. (#234)

* Joslobo/add azure storage (#232)

* Add azure-storage spec file to mariner-core

* Register with legal and update map file

* Fixed #source0 link

* Updated per code review comments

* Fixed URL to use https

* Initial spec lint action commit (#172) (#191)

* Initial spec-cleaner commit for CBL-Mariner

* Add cgmanifest.json file for GitHub workflows folder

* Set continue-on-error to true for a trial period

* patch openssh (#238)

* Update pull_request_template.md (#236)

* Fix check tests for git, make, krb5 and libcap-ng (#241)

* fix check tests

* update toolchain manifests

* fix blank spaces and tabs in make.spec

* Fix CVE-2019-12735 in vim (#230)

* Fix CVE-2019-12735 in vim

* Update the changelog to address only one CVE.

* Switching to correct source for the Microsoft bundle. (#244)

* Fix check tests for brotli, gzip and python-certifi (#245)

* fix check test for brotli, gzip, python-cerifi

* update manifest release version for gzip

* skip check for vim

* Patch unbound CVE-2020-12662 and CVE-2020-12663 (#246)

* Portablectl patches for to support --now --enable and --no-block flags (#139)

* Portablectl patches for to support --now --enable and --no-block flags

* Portablectl patches for to support --now --enable and --no-block flags

* Patch lua CVE-2019-6706, CVE-2020-15888, nopatch CVE-2020-24342 (#169)

* Patch lua CVE-2019-6706, CVE-2020-15888, CVE-2020-15945, nopatch CVE-2020-24342

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Roll back CVE-2020-15945, patch ineffective

Signed-off-by: Daniel McIlvaney <damcilva@microsoft.com>

* Nopatch ed CVE-2015-2987 (#209)

ed CVE-2015-2987 applies to a different program named ed.

* Patch gnutls CVE-2020-24659 (#247)

Upstream CVE discussion: https://gitlab.com/gnutls/gnutls/-/issues/1071

* update ant verision

* fix changelog comment

* update cgmanifest

* Nopatch sqlite CVE-2015-3717 (#254)

* Added omi package

* Adding the `ccache` and `clamav` packages. (#251)

* Generate ant signatures (#260)

* Add auoms package (#258)

* add auoms package

* add auoms original source url comments

* fix changelog history

* fix auoms signatures

* fix changelog

* use %license

* update licenses-map

* add omi to LICENSES-MAP

* merge latest LICENSES-MAP

* Implement "distroless" containers (#252)

* Create distroless container without bash and surplus dependencies
* Remove RPM database for distroless
* Add busybox and uclibc. Add distroless-packages-debug
* Update cgmanifest

Co-authored-by: Jon Slobodzian <joslobo@microsoft.com>
Co-authored-by: MateuszMalisz <mamalisz@microsoft.com>

* Updated mariner-release package version (#262)

* fix setup (#263)

* fix missed merge file

* Fixed bad file merge

* Fixed poorly merged files

* Merge distroless container revert to 1.0 (#265)

* Revert "Implement "distroless" containers (#252)"

This reverts commit e41efdda19.

* Revert "Implement "distroless" containers (#252)" (#264)

This reverts commit e41efdda19.

* fix package manifest merge issues

* fix issues building input-srpms

* fix package manifest issues

* remove duplicate patch and sed cmd from lua spec

* revert package ignore list and graphoptimizer changes

* remove runc from LICENSES-MAP.md

* Update pkggen merge (#316)

* Clean up lua.spec 1.0 to dev merge (#318)

* update lua.spec and licenses-map.md per feedback

* revert gzip changes

* revert krb5 change

Co-authored-by: Jim Perrin <Jim.Perrin@microsoft.com>
Co-authored-by: Jason Goscinski <jasongos@users.noreply.github.com>
Co-authored-by: Mateusz Malisz <maliszmat@outlook.com>
Co-authored-by: Nicolas Ontiveros <54044510+niontive@users.noreply.github.com>
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
Co-authored-by: Daniel McIlvaney <damcilva@microsoft.com>
Co-authored-by: Christopher Co <christopher.co@microsoft.com>
Co-authored-by: chalamalasetty <chalamalasetty@live.com>
Co-authored-by: chalamalasetty <42326515+chalamalasetty@users.noreply.github.com>
Co-authored-by: Joe Schmitt <1146681+schmittjoseph@users.noreply.github.com>
Co-authored-by: Henry Beberman <henry.beberman@microsoft.com>
Co-authored-by: Emre Girgin <50592283+mrgirgin@users.noreply.github.com>
Co-authored-by: Thomas Crain <thcrain@microsoft.com>
Co-authored-by: Jon Slobodzian <joslobo@microsoft.com>
Co-authored-by: Emre Girgin <mrgirgin@microsoft.com>
Co-authored-by: Daniel Burgener <burgener.daniel@gmail.com>
Co-authored-by: nicolas guibourge <nicogbg@gmail.com>
Co-authored-by: Chirag Shah <chsha@microsoft.com>
Co-authored-by: Henry Li <lihl@microsoft.com>
Co-authored-by: Henry Li <69694695+henryli001@users.noreply.github.com>
Co-authored-by: rychenf1 <rychenf1@gmail.com>
Co-authored-by: Nick Samson <nick.samson@microsoft.com>
Co-authored-by: MateuszMalisz <mamalisz@microsoft.com>
2020-11-03 17:40:59 -08:00
Emre Girgin 89fec183a4
Upgrade ruby to 2.6.6 to resolve CVE-2019-16255, CVE-2019-16201, CVE-2020-10933, CVE-2020-5247, CVE-2019-15845, CVE-2019-16254 (#224)
* Upgrade ruby to 2.6.6 to resolve CVEs

* Update cgmanifest
2020-10-16 16:47:24 -07:00
Jon Slobodzian b877013b27 Initial CBL-Mariner commit to GitHub 2020-08-06 20:17:52 -07:00