Skip to content

Mariner 2.0 release 02/11/2023 (merge main into 2.0)#7824

Merged
nicogbg merged 33 commits into2.0from
nicogbg/mariner-2.0-release-20230211
Feb 12, 2024
Merged

Mariner 2.0 release 02/11/2023 (merge main into 2.0)#7824
nicogbg merged 33 commits into2.0from
nicogbg/mariner-2.0-release-20230211

Conversation

@nicogbg
Copy link
Copy Markdown
Contributor

@nicogbg nicogbg commented Feb 12, 2024

Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)

  • The toolchain has been rebuilt successfully (or no changes were made to it)
  • The toolchain/worker package manifests are up-to-date
  • Any updated packages successfully build (or no packages were changed)
  • Packages depending on static components modified in this PR (Golang, *-static subpackages, etc.) have had their Release tag incremented.
  • Package tests (%check section) have been verified with RUN_CHECK=y for existing SPEC files, or added to new SPEC files
  • All package sources are available
  • cgmanifest files are up-to-date and sorted (./cgmanifest.json, ./toolkit/scripts/toolchain/cgmanifest.json, .github/workflows/cgmanifest.json)
  • LICENSE-MAP files are up-to-date (./SPECS/LICENSES-AND-NOTICES/data/licenses.json, ./SPECS/LICENSES-AND-NOTICES/LICENSES-MAP.md, ./SPECS/LICENSES-AND-NOTICES/LICENSE-EXCEPTIONS.PHOTON)
  • All source files have up-to-date hashes in the *.signatures.json files
  • sudo make go-tidy-all and sudo make go-test-coverage pass
  • Documentation has been updated to match any changes to the build system
  • Ready to merge
Summary

Mariner 2.0 release 02/11/2023 (merge main into 2.0)

Change Log
  • Change
  • Change
  • Change
Does this affect the toolchain?

YES

Associated issues
  • #xxxx
Links to CVEs
Test Methodology
  • Pipeline build id: xxxx

neha170 and others added 30 commits February 2, 2024 09:52
@neha170
Sort, reorder and color build summary output (#6649)
07ec048 
Add new make option LOG_COLOR with options auto (default), always, never. 'always' colors both terminal output and logs; 'auto' colors only terminal output; 'never' disables color in both.
@CBL-Mariner-Bot
[AUTOPATCHER-CORE] Upgrade tzdata to 2024a upgrade to version 2024a (#…
4e42232 
…7639)
@aadhar-agarwal
Update sos to 4.6.1 (#7553)
9a4ea2e
@CBL-Mariner-Bot @xordux
[AUTO-CHERRYPICK] lz4: Upgrade to 1.9.4-1 to fix CVE-2021-3520 - bran…
bb769f7 
…ch main (#7676)

Co-authored-by: Rohit Rawat <rohitrawat@microsoft.com>
@mfrw
msft-golang: upgrade version 1.20.11 -> 1.21.6 (#7569)
498a01c 
Changelog: Changelog: https://go.dev/doc/devel/release#go1.21.0
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
@adobrzhansky
Add package nss-mdns v0.15.1 (#7407)
b600bbc
@mbykhovtsev-ms
patch vendored go module quic-go for package coredns to address CVE-2…
87dd34c 
…023-49295 (#7502)
@PawelWMS
Removed extra double quote in the toolkit. (#7736)
75a70a5
@sudmis @mfrw
sriov-network-device-plugin: upgrade from 3.5.1 -> 3.6.2 (#7463)
07bfaa1 
Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
Signed-off-by: Sudhanshu Mishra <sudhanshu.1987se@live.com>
@AZaugg
Fix missing nobody user/group for nfs squash (#6652)
d3439c7
@arc9693
kernel-uvm-cvm: remove spec and references (#7716)
de5c331
@romoh
Add cleanup script to base images (#7687)
6402b54 
Signed-off-by: Roaa Sakr <romoh@microsoft.com>
@ellie-di
Revert "Shift user/group creation earlier in image build for rootfs i…
d5b9572 
…mage type" (#7753)
@corvus-callidus
Fix pytest version for python-virtualenv (#7752)
046b27b
@CBL-Mariner-Bot @tobiasb-ms
[AUTO-CHERRYPICK] fix cve-2022-21698 in moby-cli - branch main (#7697)
176cf2b 
Co-authored-by: Tobias Brick <39196763+tobiasb-ms@users.noreply.github.com>
@CBL-Mariner-Bot @tobiasb-ms
[AUTO-CHERRYPICK] fix cve-2022-21698 in moby-engine - branch main (#7735
d984b2f 
)

Co-authored-by: Tobias Brick <39196763+tobiasb-ms@users.noreply.github.com>
@CBL-Mariner-Bot @tobiasb-ms
[AUTO-CHERRYPICK] fix cve-2022-21698 in rook - branch main (#7765)
bf37045 
Co-authored-by: Tobias Brick <39196763+tobiasb-ms@users.noreply.github.com>
@CBL-Mariner-Bot @tobiasb-ms
[AUTO-CHERRYPICK] fix cve-2022-21698 in prometheus-node-exporter - br…
deea342 
…anch main (#7762)

Co-authored-by: Tobias Brick <39196763+tobiasb-ms@users.noreply.github.com>
@CBL-Mariner-Bot @tobiasb-ms
[AUTO-CHERRYPICK] fix cve-2022-21698 in prometheus-process-exporter -…
f17fb7b 
… branch main (#7779)

Co-authored-by: Tobias Brick <39196763+tobiasb-ms@users.noreply.github.com>
@tobiasb-ms @jslobodzian
[CHERRYPICK FROM FASTTRACK/2.0] fix cve-2022-21698 in node-problem-de…
5b876f7 
…tector (#7689) (#7786)

Co-authored-by: jslobodzian <joslobo@microsoft.com>
@tobiasb-ms @jslobodzian
[CHERRYPICK FROM FASTTRACK/2.0] fix cve-2022-21698 in nmi (#7681) (#7785
d0e2fb1 
)

Co-authored-by: jslobodzian <joslobo@microsoft.com>
@romoh
Allow dracut info logs to be visible for baremetal base image (#7788)
5433c58
@CBL-Mariner-Bot @rlmenge
[AUTOPATCHER-kernel] Kernel and kernel-mos upgrade to version 5.15.14…
f4ecbfe 
…8.2 - branch main (#7793)

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>
@PawelWMS
Cherry-picked fast-track fix for 'local-path-provisioner' (#7725). (#…
238a103 
…7808)
@PawelWMS
Cherry-picked fast-track fix for 'kube-vip-cloud-provider' (#7698). (#…
589ef81 
…7809)
@CBL-Mariner-Bot @dmcilvaney @PawelWMS
[AUTO-CHERRYPICK] Patch CVE-2023-44487 in vendored golang - branch ma…
aaac8a4 
…in (#7804)

Co-authored-by: Daniel McIlvaney <damcilva@microsoft.com>
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
@CBL-Mariner-Bot @osamaesmailmsft
[AUTO-CHERRYPICK] Patch CVE-2021-44716 in libcontainers-common - …
743f60e 
…branch main (#7731)

Co-authored-by: osamaesmailmsft <110202916+osamaesmailmsft@users.noreply.github.com>
@CBL-Mariner-Bot @osamaesmailmsft
[AUTO-CHERRYPICK] Patch flannel to resolve CVE-2021-44716 - branc…
629ddaf 
…h main (#7718)

Co-authored-by: osamaesmailmsft <110202916+osamaesmailmsft@users.noreply.github.com>
@PawelWMS
Fix CVE-2021-44716 (CP #7717). (#7815)
fd5e30e
@sharath-srikanth-chellappa
Add upstream patch to kubevirt to force hp-volume- pod to respect blo…
1add496 
…ckdevices (IcM 467224770) (#7781)

Co-authored-by: Sharath Srikanth Chellappa <sharathsr@microsoft.com>
mfrw and others added 3 commits February 9, 2024 15:02
@mfrw @PawelWMS
Upgraded golang version 1.20.10 -> 1.21.6 (#7640)
bd9a5c7 
Changelog: https://go.dev/doc/devel/release#go1.21.0
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
@PawelWMS
Fixed merge leftovers in a coredns patch. (#7823)
20f96bc
@CBL-Mariner-Bot
snap for release 02/11/2023
d1415bc
@nicogbg nicogbg requested review from a team as code owners February 12, 2024 00:41
@nicogbg
Copy link
Copy Markdown
Contributor Author

nicogbg commented Feb 12, 2024

Mariner 2.0 release 02/11/2023 (merge main into 2.0)

@nicogbg nicogbg merged commit 2cdd0f1 into 2.0 Feb 12, 2024
@nicogbg nicogbg deleted the nicogbg/mariner-2.0-release-20230211 branch February 12, 2024 00:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.