Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge CVE fixes for September 2.0 release #3724

Merged
merged 17 commits into from
Sep 8, 2022
Merged

Merge CVE fixes for September 2.0 release #3724

merged 17 commits into from
Sep 8, 2022

Commits on Sep 8, 2022

  1. fix npm version in nodejs.spec (#3571)

    @Camelron @anphel31
    Camelron authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    b41e41c View commit details
    Browse the repository at this point in the history

  2. upgrade vim to 9.0.0232 (#3580)

    @anphel31
    anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    d78c843 View commit details
    Browse the repository at this point in the history

  3. qemu : fix CVE-2022-35414 (#3597) 

    * qemu : fix CVE-2022-35414

* address PR comment

Co-authored-by: Nicolas Guibourge <[email protected]>
    @nicogbg @anphel31
    2 people authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    57ee310 View commit details
    Browse the repository at this point in the history

  4. libxml2 and python-lxml: fix CVE-2022-2309 (#3583) 

    * libxml2 and python-lxml: fix CVE-2022-2309

* libxml2 and python-lxml: fix CVE-2022-2309

* address PR comments

Co-authored-by: Nicolas Guibourge <[email protected]>
    @nicogbg @anphel31
    2 people authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    3658013 View commit details
    Browse the repository at this point in the history

  5. rubygem-yajl-ruby: fix CVE 2022 24795 (#3598) 

    * rubygem-yajl-ruby : fix CVE-2022-24795

* rubygem-yajl-ruby : fix CVE-2022-24795

* back port patch from 1.4.1

* fix spec issue

* address PR comments

Co-authored-by: Nicolas Guibourge <[email protected]>
    @nicogbg @anphel31
    2 people authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    2c363f9 View commit details
    Browse the repository at this point in the history

  6. Update cert-manager to v1.7.3. (#3575) 

    - Update cert-manager to v1.7.3.
- Split cert-manager binaries into separate packages.
- Remove cert-manager build dependency on Bazel and just build the
binaries directly using `go build`. This makes building easier. Also,
the latest upstream version of cert-manager does this.
- Use the Go "vendor" directory for Go dependencies instead of dumping
files in the global Go cache.
    @cwize1 @anphel31
    cwize1 authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    24dbfdf View commit details
    Browse the repository at this point in the history

  7. Bump supported go versions to 1.17.13, 1.18.5 to fix fifteen CVEs (#3600 

    )

Co-authored-by: Pawel Winogrodzki <[email protected]>
    @oliviacrain @PawelWMS @anphel31
    2 people authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    593692c View commit details
    Browse the repository at this point in the history

  8. dpkd: bump version to 21.11.2 to address CVE-2022-2132 (#3631) 

    * dpkd: bump version to 21.11.2 to address CVE-2022-2132
* dpdk: cgmanifest: update entry

Signed-off-by: Muhammad Falak R Wani <[email protected]>
    @mfrw @anphel31
    mfrw authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    676aa30 View commit details
    Browse the repository at this point in the history

  9. vim: upgrade to 9.0.0325 to fix CVE-2022-2980, CVE-2022-2982, CVE-2… 

    …022-2923, CVE-2022-2946 (#3643)
    @hbeberman @anphel31
    hbeberman authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    e77d3f3 View commit details
    Browse the repository at this point in the history

  10. python3: fix CVE-2015-20107 (#3644)

    @hbeberman @anphel31
    hbeberman authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    442d7cf View commit details
    Browse the repository at this point in the history

  11. python3: fix CVE-2021-28861 (#3654)

    @hbeberman @anphel31
    hbeberman authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    ce20a21 View commit details
    Browse the repository at this point in the history

  12. colord: fix CVE-2021-42523 (#3675)

    @hbeberman @anphel31
    hbeberman authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    aab2d1b View commit details
    Browse the repository at this point in the history

  13. virglrenderer: fix CVE-2022-0135 (#3674)

    @hbeberman @anphel31
    hbeberman authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    4333fb0 View commit details
    Browse the repository at this point in the history

  14. libtar: Pull misc Fedora patches, fix CVE-2021-33643, CVE-2021-33644, C… 

    …VE-2021-33645, CVE-2021-33646 (#3686)

* Apply Fedora patches

* Apply linter

* Use upstream patch
    @dmcilvaney @anphel31
    dmcilvaney authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    98cae85 View commit details
    Browse the repository at this point in the history

  15. Patch qemu CVE-2021-4158 (#3696)

    @dmcilvaney @anphel31
    dmcilvaney authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    020d6f9 View commit details
    Browse the repository at this point in the history

  16. libtar: Fixup spec formatting, remove .la files, remove explicit prov… 

    …ides (#3698)

* Fixup libtar spec formatting, .la files, provides

* Add comment so we can track CVE fixes
    @dmcilvaney @anphel31
    dmcilvaney authored and anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    8c7d987 View commit details
    Browse the repository at this point in the history

  17. update mariner-release to 2.0-19 (#3723)

    @anphel31
    anphel31 committed Sep 8, 2022
    Configuration menu
    Copy the full SHA
    50ea128 View commit details
    Browse the repository at this point in the history