Skip to content

Commit 1a94296

Browse files
PawelWMSPawelWMS
authored
October 2022 CVE fixes update.
2 parents 2f2540f + 838d7fe commit 1a94296

File tree

17 files changed

+789
-48
lines changed

17 files changed

+789
-48
lines changed

‎SPECS/libtasn1/libtasn1.signatures.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
22
"Signatures": {
3-
"libtasn1-4.18.0.tar.gz": "4365c154953563d64c67a024b607d1ee75c6db76e0d0f65709ea80a334cd1898"
3+
"libtasn1-4.19.0.tar.gz": "1613f0ac1cf484d6ec0ce3b8c06d56263cc7242f1c23b30d82d23de345a63f7a"
44
}
55
}

‎SPECS/libtasn1/libtasn1.spec‎

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: ASN.1 library
22
Name: libtasn1
3-
Version: 4.18.0
4-
Release: 2%{?dist}
3+
Version: 4.19.0
4+
Release: 1%{?dist}
55
License: GPLv3+ AND LGPLv2+
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -57,6 +57,9 @@ make %{?_smp_mflags} check
5757
%{_mandir}/man3/*
5858

5959
%changelog
60+
* Tue Oct 25 2022 Pawel Winogrodzki <[email protected]> - 4.19.0-1
61+
- Updating to version 4.19.0 to fix CVE-2021-46848.
62+
6063
* Tue Feb 08 2022 Thomas Crain <[email protected]> - 4.18.0-2
6164
- Remove manual pkgconfig(*) provides in toolchain specs
6265

‎SPECS/libtiff/CVE-2022-3570.patch‎

Lines changed: 674 additions & 0 deletions
Large diffs are not rendered by default.

‎SPECS/libtiff/libtiff.spec‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: TIFF libraries and associated utilities.
22
Name: libtiff
33
Version: 4.4.0
4-
Release: 4%{?dist}
4+
Release: 5%{?dist}
55
License: libtiff
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -12,6 +12,7 @@ Source0: https://gitlab.com/libtiff/libtiff/-/archive/v%{version}/libtiff
1212
Patch0: CVE-2022-2056.patch
1313
Patch1: CVE-2022-34526.patch
1414
Patch2: CVE-2022-2953.patch
15+
Patch3: CVE-2022-3570.patch
1516
BuildRequires: autoconf
1617
BuildRequires: automake
1718
BuildRequires: libjpeg-turbo-devel
@@ -66,6 +67,9 @@ make %{?_smp_mflags} -k check
6667
%{_mandir}/man3/*
6768

6869
%changelog
70+
* Mon Oct 24 2022 Sean Dougherty <[email protected]> - 4.4.0-5
71+
- Patch CVE-2022-3570
72+
6973
* Wed Sep 14 2022 Nan Liu <[email protected]> - 4.4.0-4
7074
- Patch CVE-2022-2953
7175

‎SPECS/mariner-release/mariner-release.spec‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: CBL-Mariner release files
22
Name: mariner-release
33
Version: 2.0
4-
Release: 23%{?dist}
4+
Release: 24%{?dist}
55
License: MIT
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -62,6 +62,9 @@ EOF
6262
%config(noreplace) %{_sysconfdir}/issue.net
6363

6464
%changelog
65+
* Tue Oct 25 2022 Pawel Winogrodzki <[email protected]> - 2.0-24
66+
- Updating version for October update.
67+
6568
* Fri Oct 07 2022 Pawel Winogrodzki <[email protected]> - 2.0-23
6669
- Updating version for October release.
6770

‎SPECS/nodejs/nodejs.signatures.json‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"Signatures": {
3-
"node-v16.16.0.tar.xz": "327688a0d6dafbf7b32324069f16e3d893dcb6654c889c24240e976441c20ffe"
4-
}
2+
"Signatures": {
3+
"node-v16.17.1.tar.xz": "def33a26ed76ad308c9fdf04028cbbd4ace7c5de2fa8c866be79836c12f3251d"
4+
}
55
}

‎SPECS/nodejs/nodejs.spec‎

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
# Retrieved from 'deps/npm/package.json' inside the sources tarball.
2-
%define npm_version 8.11.0
2+
%define npm_version 8.15.0
33

44
Summary: A JavaScript runtime built on Chrome's V8 JavaScript engine.
55
Name: nodejs
66
# WARNINGS: MUST check and update the 'npm_version' macro for every version update of this package.
77
# The version of NPM can be found inside the sources under 'deps/npm/package.json'.
8-
Version: 16.16.0
8+
Version: 16.17.1
99
Release: 2%{?dist}
1010
License: BSD and MIT and Public Domain and naist-2003
1111
Group: Applications/System
@@ -114,6 +114,12 @@ make cctest
114114
%{_datadir}/systemtap/tapset/node.stp
115115

116116
%changelog
117+
* Tue Oct 25 2022 Nicolas Guibourge <[email protected]> - 16.17.1-2
118+
- Change npm_version to 8.15.0 to reflect the actual version of npm bundled with v16.17.1
119+
120+
* Mon Oct 24 2022 CBL-Mariner Servicing Account <[email protected]> - 16.17.1-1
121+
- Upgrade to 16.17.1
122+
117123
* Thu Aug 18 2022 Cameron Baird <[email protected]> - 16.16.0-2
118124
- Change npm_version to 8.11.0 to reflect the actual version of npm bundled with v16.16.0
119125

‎SPECS/rubygem-minitest/rubygem-minitest.spec‎

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
Summary: Minitest provides a complete suite of testing facilities
44
Name: rubygem-%{gem_name}
55
Version: 5.15.0
6-
Release: 1%{?dist}
6+
Release: 2%{?dist}
77
# minitest source is licensed under MIT and minitest.gemspec is taken from ruby source, licensed under the rest
88
License: MIT AND (Ruby OR BSD) AND Public Domain AND MIT AND CC0 AND zlib AND UCD
99
Vendor: Microsoft Corporation
@@ -13,11 +13,17 @@ URL: https://github.com/seattlerb/minitest
1313
Source0: https://github.com/minitest/minitest/archive/refs/tags/v%{version}.tar.gz#/%{gem_name}-%{version}.tar.gz
1414
# When updating the version, please make necessary changes in this .gemspec, e.g. update version, dependencies (use https://rubygems.org/gems/minitest)
1515
Source1: minitest.gemspec
16+
BuildArch: noarch
17+
1618
BuildRequires: git
1719
BuildRequires: ruby
20+
1821
Requires: ruby(release)
22+
23+
# This package used to be bundled with older versions of Ruby.
24+
Obsoletes: ruby <= 3.1.2-2%{?dist}
25+
1926
Provides: rubygem(minitest) = %{version}-%{release}
20-
BuildArch: noarch
2127

2228
%description
2329
minitest/unit is a small and incredibly fast unit testing framework.
@@ -47,6 +53,9 @@ cp README.rdoc %{buildroot}%{gem_instdir}/
4753
%{gemdir}
4854

4955
%changelog
56+
* Mon Oct 24 2022 Pawel Winogrodzki <[email protected]> - 5.15.0-2
57+
- Adding 'Obsoletes: ruby <= 3.1.2-2'.
58+
5059
* Tue May 24 2022 Neha Agarwal <[email protected]> - 5.15.0-1
5160
- Update to v5.15.0
5261
- Get source.tar.gz from upstream, get initial .gemspec from ruby2.7.4 source (license (Ruby OR BSD) AND Public Domain AND MIT AND CC0 AND zlib AND UCD)

‎SPECS/rubygem-power_assert/rubygem-power_assert.spec‎

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,18 +2,23 @@
22
Summary: Power Assert for Ruby
33
Name: rubygem-%{gem_name}
44
Version: 2.0.1
5-
Release: 3%{?dist}
5+
Release: 4%{?dist}
66
License: BSD
77
Vendor: Microsoft Corporation
88
Distribution: Mariner
99
Group: Development/Languages
1010
URL: https://github.com/ruby/power_assert/
1111
Source0: https://github.com/ruby/power_assert/archive/refs/tags/v%{version}.tar.gz#/%{gem_name}-%{version}.tar.gz
1212
Patch0: fix-file_list.patch
13+
BuildArch: noarch
14+
1315
BuildRequires: git
1416
BuildRequires: ruby
17+
18+
# This package used to be bundled with older versions of Ruby.
19+
Obsoletes: ruby <= 3.1.2-2%{?dist}
20+
1521
Provides: rubygem(power_assert) = %{version}-%{release}
16-
BuildArch: noarch
1722

1823
%description
1924
Power Assert shows each value of variables and method calls in the expression.
@@ -36,6 +41,9 @@ gem install -V --local --force --install-dir %{buildroot}/%{gemdir} %{gem_name}-
3641
%{gemdir}
3742

3843
%changelog
44+
* Mon Oct 24 2022 Pawel Winogrodzki <[email protected]> - 2.0.1-4
45+
- Adding 'Obsoletes: ruby <= 3.1.2-2'.
46+
3947
* Wed Jul 06 2022 Neha Agarwal <[email protected]> - 2.0.1-3
4048
- Added missing lib files
4149

‎SPECS/rubygem-rake/rubygem-rake.spec‎

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,13 @@
22
Summary: Rake is a Make-like program implemented in Ruby
33
Name: rubygem-%{gem_name}
44
Version: 13.0.6
5-
Release: 5%{?dist}
5+
Release: 6%{?dist}
66
License: MIT
77
Vendor: Microsoft Corporation
88
Distribution: Mariner
99
URL: https://ruby.github.io/rake/
1010
Source0: https://github.com/ruby/rake/archive/refs/tags/v%{version}.tar.gz#/%{gem_name}-%{version}.tar.gz
1111
BuildArch: noarch
12-
Provides: rubygem(%{gem_name}) = %{version}-%{release}
1312

1413
BuildRequires: ruby
1514
BuildRequires: ruby(release)
@@ -18,6 +17,11 @@ BuildRequires: rubygems-devel
1817
BuildRequires: rubygem(minitest) >= 5
1918
%endif
2019

20+
# This package used to be bundled with older versions of Ruby.
21+
Obsoletes: ruby <= 3.1.2-2%{?dist}
22+
23+
Provides: rubygem(%{gem_name}) = %{version}-%{release}
24+
2125
%description
2226
Rake is a Make-like program implemented in Ruby. Tasks and dependencies are
2327
specified in standard Ruby syntax.
@@ -75,6 +79,9 @@ popd
7579
%doc %{gem_instdir}/*.rdoc
7680

7781
%changelog
82+
* Mon Oct 24 2022 Pawel Winogrodzki <[email protected]> - 13.0.6-6
83+
- Adding 'Obsoletes: ruby <= 3.1.2-2'.
84+
7885
* Wed Jun 22 2022 Neha Agarwal <[email protected]> - 13.0.6-5
7986
- Add provides.
8087

0 commit comments

Comments
 (0)