Skip to content

[AUTO-CHERRYPICK] Revert "Patch glibc for CVE-2023-4527, CVE-2023-4806, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2025-0395, CVE-2025-4802 [High]" - branch 3.0-dev #14038

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 2 additions & 5 deletions SPECS-EXTENDED/buildah/buildah.spec
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
Summary: A command line tool used for creating OCI Images
Name: buildah
Version: 1.18.0
Release: 31%{?dist}
Release: 30%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -32,7 +32,7 @@ BuildRequires: btrfs-progs-devel
BuildRequires: device-mapper-devel
BuildRequires: git
BuildRequires: glib2-devel
BuildRequires: glibc-static >= 2.38-11%{?dist}
BuildRequires: glibc-static >= 2.38-10%{?dist}
BuildRequires: go-md2man
BuildRequires: go-rpm-macros
BuildRequires: golang
Expand Down Expand Up @@ -123,9 +123,6 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
%{_datadir}/%{name}/test

%changelog
* Thu May 22 2025 Kanishk Bansal <kanbansal@microsoft.com> - 1.18.0-31
- Bump to rebuild with updated glibc

* Mon May 12 2025 Andrew Phelps <anphel@microsoft.com> - 1.18.0-30
- Bump to rebuild with updated glibc

Expand Down
7 changes: 2 additions & 5 deletions SPECS-EXTENDED/catatonit/catatonit.spec
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ Distribution: Azure Linux

Name: catatonit
Version: 0.1.7
Release: 19%{?dist}
Release: 18%{?dist}
Summary: A signal-forwarding process manager for containers
License: GPLv3+
URL: https://github.com/openSUSE/catatonit
Expand All @@ -13,7 +13,7 @@ BuildRequires: automake
BuildRequires: file
BuildRequires: gcc
BuildRequires: git
BuildRequires: glibc-static >= 2.38-11%{?dist}
BuildRequires: glibc-static >= 2.38-10%{?dist}
BuildRequires: libtool
BuildRequires: make

Expand Down Expand Up @@ -61,9 +61,6 @@ ln -s %{_libexecdir}/%{name}/%{name} %{buildroot}%{_libexecdir}/podman/%{name}
%{_libexecdir}/podman/%{name}

%changelog
* Thu May 22 2025 Kanishk Bansal <kanbansal@microsoft.com> - 0.1.7-19
- Bump to rebuild with updated glibc

* Mon May 12 2025 Andrew Phelps <anphel@microsoft.com> - 0.1.7-18
- Bump to rebuild with updated glibc

Expand Down
7 changes: 2 additions & 5 deletions SPECS-EXTENDED/dyninst/dyninst.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: An API for Run-time Code Generation
License: LGPLv2+
Name: dyninst
Release: 21%{?dist}
Release: 20%{?dist}
Vendor: Microsoft Corporation
Distribution: Azure Linux
URL: http://www.dyninst.org
Expand Down Expand Up @@ -31,7 +31,7 @@ BuildRequires: tbb tbb-devel

# Extra requires just for the testsuite
BuildRequires: gcc-gfortran libstdc++-static libxml2-devel
BuildRequires: glibc-static >= 2.38-11%{?dist}
BuildRequires: glibc-static >= 2.38-10%{?dist}

# Testsuite files should not provide/require anything
%{?filter_setup:
Expand Down Expand Up @@ -194,9 +194,6 @@ echo "%{_libdir}/dyninst" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf
%attr(644,root,root) %{_libdir}/dyninst/testsuite/*.a

%changelog
* Thu May 22 2025 Kanishk Bansal <kanbansal@microsoft.com> - 10.1.0-21
- Bump to rebuild with updated glibc

* Mon May 12 2025 Andrew Phelps <anphel@microsoft.com> - 10.1.0-20
- Bump to rebuild with updated glibc

Expand Down
7 changes: 2 additions & 5 deletions SPECS-EXTENDED/podman/podman.spec
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@

Name: podman
Version: 4.1.1
Release: 29%{?dist}
Release: 28%{?dist}
License: ASL 2.0 and BSD and ISC and MIT and MPLv2.0
Summary: Manage Pods, Containers and Container Images
Vendor: Microsoft Corporation
Expand All @@ -50,7 +50,7 @@ BuildRequires: go-md2man
BuildRequires: golang
BuildRequires: gcc
BuildRequires: glib2-devel
BuildRequires: glibc-static >= 2.38-11%{?dist}
BuildRequires: glibc-static >= 2.38-10%{?dist}
BuildRequires: git
BuildRequires: go-rpm-macros
BuildRequires: gpgme-devel
Expand Down Expand Up @@ -386,9 +386,6 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/

# rhcontainerbot account currently managed by lsm5
%changelog
* Thu May 22 2025 Kanishk Bansal <kanbansal@microsoft.com> - 4.1.1-29
- Bump to rebuild with updated glibc

* Mon May 12 2025 Andrew Phelps <anphel@microsoft.com> - 4.1.1-28
- Bump to rebuild with updated glibc

Expand Down
7 changes: 2 additions & 5 deletions SPECS/busybox/busybox.spec
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
Summary: Statically linked binary providing simplified versions of system commands
Name: busybox
Version: 1.36.1
Release: 13%{?dist}
Release: 12%{?dist}
License: GPLv2
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -18,7 +18,7 @@ Patch4: CVE-2023-42365.patch
Patch5: CVE-2023-42366.patch
Patch6: CVE-2023-39810.patch
BuildRequires: gcc
BuildRequires: glibc-static >= 2.38-11%{?dist}
BuildRequires: glibc-static >= 2.38-10%{?dist}
BuildRequires: libselinux-devel >= 1.27.7-2
BuildRequires: libsepol-devel
%if 0%{?with_check}
Expand Down Expand Up @@ -105,9 +105,6 @@ SKIP_KNOWN_BUGS=1 ./runtest
%{_mandir}/man1/busybox.petitboot.1.gz

%changelog
* Thu May 22 2025 Kanishk Bansal <kanbansal@microsoft.com> - 1.36.1-13
- Bump to rebuild with updated glibc

* Mon May 12 2025 Andrew Phelps <anphel@microsoft.com> - 1.36.1-12
- Bump to rebuild with updated glibc

Expand Down
7 changes: 2 additions & 5 deletions SPECS/flannel/flannel.spec
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Summary: Simple and easy way to configure a layer 3 network fabric designed for Kubernetes
Name: flannel
Version: 0.24.2
Release: 15%{?dist}
Release: 14%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Azure Linux
Expand All @@ -18,7 +18,7 @@ Patch3: CVE-2025-30204.patch
Patch4: CVE-2024-51744.patch
BuildRequires: gcc
BuildRequires: glibc-devel
BuildRequires: glibc-static >= 2.38-11%{?dist}
BuildRequires: glibc-static >= 2.38-10%{?dist}
BuildRequires: golang >= 1.20
BuildRequires: kernel-headers

Expand Down Expand Up @@ -52,9 +52,6 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld
%{_bindir}/flanneld

%changelog
* Thu May 22 2025 Kanishk Bansal <kanbansal@microsoft.com> - 0.24.2-15
- Bump to rebuild with updated glibc

* Mon May 12 2025 Andrew Phelps <anphel@microsoft.com> - 0.24.2-14
- Bump to rebuild with updated glibc

Expand Down
188 changes: 0 additions & 188 deletions SPECS/glibc/CVE-2023-4527.patch

This file was deleted.

Loading
Loading