Dongsu Park
f629d1790e
changelog: add security changelog for Go 1.20.7, 1.19.12
2023-08-02 09:29:46 +02:00
Flatcar Buildbot
1fe0801646
dev-lang/go: Update from 1.20.6 to 1.20.7
2023-08-02 07:26:49 +00:00
Flatcar Buildbot
12ac09a531
dev-lang/go: Update from 1.19.11 to 1.19.12
2023-08-02 07:26:42 +00:00
flatcar-ci
fe41b34ff9
New version: main-3683.0.0-nightly-20230801-2100
2023-08-01 21:00:42 +00:00
Dongsu Park
c9f8a42824
Merge pull request #1035 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2023-08-01 15:28:29 +02:00
Flatcar Buildbot
e760c95b7d
Update mantle container image to latest HEAD
2023-08-01 13:25:06 +00:00
Dongsu Park
1de2db1ac3
Merge pull request #1036 from flatcar/buildbot/monthly-glsa-metadata-updates-2023-08-01
...
Monthly GLSA metadata 2023-08-01
2023-08-01 15:24:49 +02:00
Krzesimir Nowak
ebdc0f0aa8
changelog: Add an entry
2023-08-01 14:50:58 +02:00
Jeremi Piotrowski
5bda3b9657
sys-apps/shadow: Apply Flatcar modifications to shadow-4.13
...
- Carry over our custom tmpfiles and securetty files
- Remove /etc files and install them to /usr, use tmpfiles
- Switch /etc/login.defs edits to /usr/share/shadow/login.defs
- Drop moving passwd out of /usr since we don't have split-usr
- Drop pkg_postinst
2023-08-01 14:50:58 +02:00
Krzesimir Nowak
9ac9ad9e10
sys-apps/shadow: Sync with Gentoo
...
It's from Gentoo commit a6ec9c2a8a13f2dbd82e8768666356beea63f445.
2023-08-01 14:50:57 +02:00
Mathieu Tortuyaux
8801a16b72
dev-libs/openssl: Apply Flatcar modifications
...
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- continue shipping app-misc/c_rehash
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Signed-off-by: Dongsu Park <dpark@linux.microsoft.com>
2023-08-01 14:50:57 +02:00
Krzesimir Nowak
515580320d
dev-libs/openssl: Sync with Gentoo
...
It's from Gentoo commit 5ff6c1b3f21acc2ee6a95eda6ccda6baceedaf7d.
2023-08-01 14:50:57 +02:00
Flatcar Buildbot
9c1f77919a
portage-stable/metadata: Monthly GLSA metadata updates
2023-08-01 07:14:48 +00:00
flatcar-ci
9822dfe3a4
New version: main-3682.0.0-nightly-20230731-2100
2023-07-31 21:00:27 +00:00
Dongsu Park
09b5b108d5
Merge pull request #1027 from flatcar/cacerts-3.92-main
...
Update ca-certificates in main from 3.91 to 3.92
2023-07-31 16:33:19 +02:00
Flatcar Buildbot
4bde45b95b
app-misc/ca-certificates: Update from 3.91 to 3.92
2023-07-31 07:19:06 +00:00
flatcar-ci
a04dd35c0e
New version: main-3679.0.0-nightly-20230728-2100-INTERMEDIATE
2023-07-28 21:00:29 +00:00
Dongsu Park
4c05ada076
Merge pull request #1024 from flatcar/containerd-1.7.3-main
...
Upgrade Containerd in main from 1.7.2 to 1.7.3
2023-07-28 14:47:52 +02:00
Dongsu Park
a09442e341
Merge pull request #1011 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2023-07-28 14:44:01 +02:00
Flatcar Buildbot
8dcd289e94
Update mantle container image to latest HEAD
2023-07-28 12:37:13 +00:00
Dongsu Park
b295181ca8
Merge pull request #1022 from flatcar/dongsu/openssh-9.3_p2
...
net-misc/openssh: update to 9.3_p2
2023-07-28 14:36:55 +02:00
Flatcar Buildbot
40763c6d7b
app-containers/containerd: Update from 1.7.2 to 1.7.3
2023-07-28 08:16:24 +00:00
flatcar-ci
a14af24bc6
New version: main-3678.0.0-nightly-20230727-2100
2023-07-27 21:00:28 +00:00
Dongsu Park
6a2f155526
changelog: add security changelog for openssh 9.3_p2
2023-07-27 16:16:06 +02:00
Krzesimir Nowak
67275491ee
net-misc/openssh: Apply Flatcar modifications
...
- Mark the package as stable.
- Remove the socket unit's rate limiting.
- Fixes to configuration handling. We are trying to upstream these
changes, so this package will be eventually moved to
portage-stable. But updating it in coreos-overlay for now to drop
the use of the obsolete cygwin USE flags.
Upstream PR: https://github.com/gentoo/gentoo/pull/31615
2023-07-27 16:11:02 +02:00
Dongsu Park
4be18df704
overlay net-misc/openssh: update to 9.3_p2
...
Update net-misc/openssh to 9.3_p2, mainly address CVE-2023-38408.
Gentoo ref: ee25b7d5358f42edd851c00492a885faaf2e349c
2023-07-27 16:10:59 +02:00
flatcar-ci
d9c6b37c56
New version: main-3677.0.0-nightly-20230726-2100
2023-07-26 21:00:32 +00:00
flatcar-ci
254e4c7a41
New version: main-3676.0.0-nightly-20230725-2100
2023-07-25 21:00:32 +00:00
Thilo Fromm
02cb8e7fd6
Merge pull request #1005 from flatcar/t-lo/update-to-cncf-code-of-conduct
...
Update code-of-conduct.md
2023-07-25 09:42:37 +02:00
flatcar-ci
a85e4ffb91
New version: main-3675.0.0-nightly-20230724-2100
2023-07-24 21:00:31 +00:00
Thilo Fromm
3aac5e6f28
Update code-of-conduct.md
2023-07-24 18:20:39 +02:00
Dongsu Park
679f0f1236
Merge pull request #999 from flatcar/dongsu/openldap-2.5.14
...
net-nds/openldap: update to 2.5.14
2023-07-24 17:42:37 +02:00
Dongsu Park
4cec3b6b0c
.github: add net-nds/openldap to portage packages list
...
Add net-nds/openldap to portage packages list for weekly updates.
2023-07-24 17:41:15 +02:00
Dongsu Park
0f5cf3eeba
changelog: add changelog for openldap 2.5.14
2023-07-24 17:41:15 +02:00
Dongsu Park
ed7a926902
overlay profiles: mask openldap 2.6.3
...
Do not update to openldap 2.6.3+, to take different steps of updating
openldap.
1) from 2.4 to 2.5,
2) do an Alpha release around 2023-08, and
3) finally update from 2.5 to 2.6.
2023-07-24 17:41:11 +02:00
Dongsu Park
027e1ca222
Merge pull request #988 from flatcar/go-1.19.11-and-1.20.6-main
...
Upgrade Go from 1.19.10 and 1.20.5 to 1.19.11 and 1.20.6
2023-07-24 17:07:54 +02:00
flatcar-ci
ca9115ea46
New version: main-3672.0.0-nightly-20230721-2100-INTERMEDIATE
2023-07-21 21:00:25 +00:00
flatcar-ci
0a48501c0d
New version: main-3671.0.0-nightly-20230720-2100
2023-07-20 21:00:30 +00:00
Dongsu Park
648853c768
Merge pull request #998 from flatcar/runc-1.1.8-main
...
Upgrade Runc in main from 1.1.7 to 1.1.8
2023-07-20 16:02:31 +02:00
Dongsu Park
031a66fbd6
portage net-nds/openldap: update to 2.5.14
...
Update net-nds/openldap to 2.5.14 mainly to address CVE-2023-2953.
Gentoo ref: 5b1520ea69d410ab743eb7998b5d886bbf597375
2023-07-20 12:09:35 +02:00
Dongsu Park
f36ae06dd7
overlay app-containers/docker-cli: vendor docker client for fixing invalid header
...
To fix invalid header issue that started to happen when being built with
Go 1.19.11+, it is necessary for the docker cli repo to vendor the new docker
client part of github.com/docker/docker.
Based on https://github.com/docker/cli/commit/5d4e44df90bb .
2023-07-20 10:23:28 +02:00
Dongsu Park
3d1c3a66c0
overlay app-containers/docker-cli: Apply Flatcar modifications
...
Apply Flatcar patches, based on commit
817ad4c0db
.
2023-07-20 10:20:48 +02:00
Dongsu Park
82045f0fd4
overlay app-containers/docker-cli: reset to Gentoo
...
Reset to the state according to the state of Gentoo upstream,
to commit b93160fedf
.
to create Flatcar patches on top of that.
2023-07-20 10:18:40 +02:00
Dongsu Park
908df5f157
overlay app-containers/docker: fix invalid headers issue with Go 1.19.11
...
Docker client and daemon started to fail at sending or handling most
local connections when being compiled with Go 1.19.11, which addresses
CVE-2023-29406 by blocking invalid host headers of HTTP/1. As a
workaround, Docker started to define a dummy host header, and to use
it for local connections.
Backport the fixes to Flatcar to fix the runtime failures.
See also https://github.com/moby/moby/issues/45935 ,
https://github.com/moby/moby/pull/45942 .
2023-07-20 10:11:47 +02:00
Dongsu Park
3d001c577d
overlay app-containers/docker: Apply Flatcar modifications
...
Apply Flatcar patches, based on commit
9d6af12f1c
.
2023-07-20 10:11:47 +02:00
Dongsu Park
c7209aaf50
overlay app-containers/docker: reset to Gentoo
...
Reset to the state according to the state of Gentoo upstream,
to commit 964117a9a2
,
to create Flatcar patches on top of that.
2023-07-20 10:11:47 +02:00
Flatcar Buildbot
e4764ac549
app-containers/runc: Update from 1.1.7 to 1.1.8
2023-07-20 07:55:08 +00:00
Jeremi Piotrowski
75904af319
Merge pull request #979 from krishjainx/remove-sdk-errors
...
Check the url in get_sdk_binhost before echoing
2023-07-20 09:27:14 +02:00
flatcar-ci
b3154069a0
New version: main-3670.0.0-nightly-20230719-2100
2023-07-19 21:00:25 +00:00
Dongsu Park
5b271c4e49
Merge pull request #993 from flatcar/mantle-update-main
...
Upgrade mantle container image to latest HEAD in main
2023-07-19 10:23:09 +02:00