Skip to content

Commit 5af3926

Browse files
committed
Revert "Patch glibc for CVE-2025-4802 & CVE-2025-0395 [High] (#13934)"
This reverts commit a83411d.
1 parent 437afe0 commit 5af3926

File tree

20 files changed

+69
-372
lines changed

20 files changed

+69
-372
lines changed

SPECS-EXTENDED/buildah/buildah.spec

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@
2121
Summary: A command line tool used for creating OCI Images
2222
Name: buildah
2323
Version: 1.18.0
24-
Release: 26%{?dist}
24+
Release: 25%{?dist}
2525
License: ASL 2.0
2626
Vendor: Microsoft Corporation
2727
Distribution: Mariner
@@ -32,7 +32,7 @@ BuildRequires: btrfs-progs-devel
3232
BuildRequires: device-mapper-devel
3333
BuildRequires: git
3434
BuildRequires: glib2-devel
35-
BuildRequires: glibc-static >= 2.35-8%{?dist}
35+
BuildRequires: glibc-static >= 2.35-7%{?dist}
3636
BuildRequires: go-md2man
3737
BuildRequires: go-rpm-macros
3838
BuildRequires: golang
@@ -123,9 +123,6 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
123123
%{_datadir}/%{name}/test
124124

125125
%changelog
126-
* Sun Jun 01 2025 Kanishk Bansal <kanbansal@microsoft.com> - 1.18.0-26
127-
- Bump to rebuild with updated glibc
128-
129126
* Mon Sep 09 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.18.0-25
130127
- Bump release to rebuild with go 1.22.7
131128

SPECS-EXTENDED/catatonit/catatonit.spec

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ Distribution: Mariner
33

44
Name: catatonit
55
Version: 0.1.7
6-
Release: 11%{?dist}
6+
Release: 10%{?dist}
77
Summary: A signal-forwarding process manager for containers
88
License: GPLv3+
99
URL: https://github.com/openSUSE/catatonit
@@ -13,7 +13,7 @@ BuildRequires: automake
1313
BuildRequires: file
1414
BuildRequires: gcc
1515
BuildRequires: git
16-
BuildRequires: glibc-static >= 2.35-8%{?dist}
16+
BuildRequires: glibc-static >= 2.35-7%{?dist}
1717
BuildRequires: libtool
1818
BuildRequires: make
1919

@@ -61,9 +61,6 @@ ln -s %{_libexecdir}/%{name}/%{name} %{buildroot}%{_libexecdir}/podman/%{name}
6161
%{_libexecdir}/podman/%{name}
6262

6363
%changelog
64-
* Sun Jun 01 2025 Kanishk Bansal <kanbansal@microsoft.com> - 0.1.7-11
65-
- Bump to rebuild with updated glibc
66-
6764
* Mon May 06 2024 Rachel Menge <rachelmenge@microsoft.com> - 0.1.7-10
6865
- Bump release to rebuild against glibc 2.35-7
6966

SPECS-EXTENDED/dyninst/dyninst.spec

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: An API for Run-time Code Generation
22
License: LGPLv2+
33
Name: dyninst
4-
Release: 13%{?dist}
4+
Release: 12%{?dist}
55
Vendor: Microsoft Corporation
66
Distribution: Mariner
77
URL: http://www.dyninst.org
@@ -31,7 +31,7 @@ BuildRequires: tbb tbb-devel
3131

3232
# Extra requires just for the testsuite
3333
BuildRequires: gcc-gfortran libstdc++-static libxml2-devel
34-
BuildRequires: glibc-static >= 2.35-8%{?dist}
34+
BuildRequires: glibc-static >= 2.35-7%{?dist}
3535

3636
# Testsuite files should not provide/require anything
3737
%{?filter_setup:
@@ -194,9 +194,6 @@ echo "%{_libdir}/dyninst" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf
194194
%attr(644,root,root) %{_libdir}/dyninst/testsuite/*.a
195195

196196
%changelog
197-
* Sun Jun 01 2025 Kanishk Bansal <kanbansal@microsoft.com> - 10.1.0-13
198-
- Bump to rebuild with updated glibc
199-
200197
* Mon May 06 2024 Rachel Menge <rachelmenge@microsoft.com> - 10.1.0-12
201198
- Bump release to rebuild against glibc 2.35-7
202199

SPECS-EXTENDED/podman/podman.spec

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636

3737
Name: podman
3838
Version: 4.1.1
39-
Release: 23%{?dist}
39+
Release: 22%{?dist}
4040
License: ASL 2.0 and BSD and ISC and MIT and MPLv2.0
4141
Summary: Manage Pods, Containers and Container Images
4242
Vendor: Microsoft Corporation
@@ -51,7 +51,7 @@ BuildRequires: go-md2man
5151
BuildRequires: golang
5252
BuildRequires: gcc
5353
BuildRequires: glib2-devel
54-
BuildRequires: glibc-static >= 2.35-8%{?dist}
54+
BuildRequires: glibc-static >= 2.35-7%{?dist}
5555
BuildRequires: git
5656
BuildRequires: go-rpm-macros
5757
BuildRequires: gpgme-devel
@@ -387,9 +387,6 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/
387387

388388
# rhcontainerbot account currently managed by lsm5
389389
%changelog
390-
* Sun Jun 01 2025 Kanishk Bansal <kanbansal@microsoft.com> - 4.1.1-23
391-
- Bump to rebuild with updated glibc
392-
393390
* Mon Sep 09 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 4.1.1-22
394391
- Bump release to rebuild with go 1.22.7
395392

SPECS/busybox/busybox.spec

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: Statically linked binary providing simplified versions of system commands
22
Name: busybox
33
Version: 1.35.0
4-
Release: 15%{?dist}
4+
Release: 14%{?dist}
55
License: GPLv2
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -25,7 +25,7 @@ Patch11: CVE-2023-42366.patch
2525
Patch12: CVE-2022-48174.patch
2626
Patch13: CVE-2023-39810.patch
2727
BuildRequires: gcc
28-
BuildRequires: glibc-static >= 2.35-8%{?dist}
28+
BuildRequires: glibc-static >= 2.35-7%{?dist}
2929
BuildRequires: libselinux-devel >= 1.27.7-2
3030
BuildRequires: libsepol-devel
3131
# libbb/hash_md5_sha.c
@@ -103,9 +103,6 @@ install -m 644 docs/busybox.petitboot.1 %{buildroot}/%{_mandir}/man1/busybox.pet
103103
%{_mandir}/man1/busybox.petitboot.1.gz
104104

105105
%changelog
106-
* Sun Jun 01 2025 Kanishk Bansal <kanbansal@microsoft.com> - 1.35.0-15
107-
- Bump to rebuild with updated glibc
108-
109106
* Thu May 01 2025 Kshitiz Godara <kgodara@microsoft.com> - 1.35.0-14
110107
- Added patch for CVE-2023-39810
111108

SPECS/flannel/flannel.spec

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
Summary: Simple and easy way to configure a layer 3 network fabric designed for Kubernetes
55
Name: flannel
66
Version: 0.14.0
7-
Release: 26%{?dist}
7+
Release: 25%{?dist}
88
License: ASL 2.0
99
Vendor: Microsoft Corporation
1010
Distribution: Mariner
@@ -16,7 +16,7 @@ Patch0: CVE-2021-44716.patch
1616

1717
BuildRequires: gcc
1818
BuildRequires: glibc-devel
19-
BuildRequires: glibc-static >= 2.35-8%{?dist}
19+
BuildRequires: glibc-static >= 2.35-7%{?dist}
2020
BuildRequires: golang
2121
BuildRequires: kernel-headers
2222

@@ -49,9 +49,6 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld
4949
%{_bindir}/flanneld
5050

5151
%changelog
52-
* Sun Jun 01 2025 Kanishk Bansal <kanbansal@microsoft.com> - 0.14.0-26
53-
- Bump to rebuild with updated glibc
54-
5552
* Mon Sep 09 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 0.14.0-25
5653
- Bump release to rebuild with go 1.22.7
5754

SPECS/glibc/CVE-2025-0395.patch

Lines changed: 0 additions & 173 deletions
This file was deleted.

0 commit comments

Comments
 (0)