Commit Graph

23004 Commits

Author SHA1 Message Date
Dongsu Park
f629d1790e changelog: add security changelog for Go 1.20.7, 1.19.12 2023-08-02 09:29:46 +02:00
Flatcar Buildbot
1fe0801646 dev-lang/go: Update from 1.20.6 to 1.20.7 2023-08-02 07:26:49 +00:00
Flatcar Buildbot
12ac09a531 dev-lang/go: Update from 1.19.11 to 1.19.12 2023-08-02 07:26:42 +00:00
flatcar-ci
fe41b34ff9 New version: main-3683.0.0-nightly-20230801-2100 2023-08-01 21:00:42 +00:00
Dongsu Park
c9f8a42824
Merge pull request #1035 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-08-01 15:28:29 +02:00
Flatcar Buildbot
e760c95b7d Update mantle container image to latest HEAD 2023-08-01 13:25:06 +00:00
Dongsu Park
1de2db1ac3
Merge pull request #1036 from flatcar/buildbot/monthly-glsa-metadata-updates-2023-08-01
Monthly GLSA metadata 2023-08-01
2023-08-01 15:24:49 +02:00
Krzesimir Nowak
ebdc0f0aa8 changelog: Add an entry 2023-08-01 14:50:58 +02:00
Jeremi Piotrowski
5bda3b9657 sys-apps/shadow: Apply Flatcar modifications to shadow-4.13
- Carry over our custom tmpfiles and securetty files
- Remove /etc files and install them to /usr, use tmpfiles
- Switch /etc/login.defs edits to /usr/share/shadow/login.defs
- Drop moving passwd out of /usr since we don't have split-usr
- Drop pkg_postinst
2023-08-01 14:50:58 +02:00
Krzesimir Nowak
9ac9ad9e10 sys-apps/shadow: Sync with Gentoo
It's from Gentoo commit a6ec9c2a8a13f2dbd82e8768666356beea63f445.
2023-08-01 14:50:57 +02:00
Mathieu Tortuyaux
8801a16b72 dev-libs/openssl: Apply Flatcar modifications
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- continue shipping app-misc/c_rehash

Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Signed-off-by: Dongsu Park <dpark@linux.microsoft.com>
2023-08-01 14:50:57 +02:00
Krzesimir Nowak
515580320d dev-libs/openssl: Sync with Gentoo
It's from Gentoo commit 5ff6c1b3f21acc2ee6a95eda6ccda6baceedaf7d.
2023-08-01 14:50:57 +02:00
Flatcar Buildbot
9c1f77919a portage-stable/metadata: Monthly GLSA metadata updates 2023-08-01 07:14:48 +00:00
flatcar-ci
9822dfe3a4 New version: main-3682.0.0-nightly-20230731-2100 2023-07-31 21:00:27 +00:00
Dongsu Park
09b5b108d5
Merge pull request #1027 from flatcar/cacerts-3.92-main
Update ca-certificates in main from 3.91 to 3.92
2023-07-31 16:33:19 +02:00
Flatcar Buildbot
4bde45b95b app-misc/ca-certificates: Update from 3.91 to 3.92 2023-07-31 07:19:06 +00:00
flatcar-ci
a04dd35c0e New version: main-3679.0.0-nightly-20230728-2100-INTERMEDIATE 2023-07-28 21:00:29 +00:00
Dongsu Park
4c05ada076
Merge pull request #1024 from flatcar/containerd-1.7.3-main
Upgrade Containerd in main from 1.7.2 to 1.7.3
2023-07-28 14:47:52 +02:00
Dongsu Park
a09442e341
Merge pull request #1011 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-07-28 14:44:01 +02:00
Flatcar Buildbot
8dcd289e94 Update mantle container image to latest HEAD 2023-07-28 12:37:13 +00:00
Dongsu Park
b295181ca8
Merge pull request #1022 from flatcar/dongsu/openssh-9.3_p2
net-misc/openssh: update to 9.3_p2
2023-07-28 14:36:55 +02:00
Flatcar Buildbot
40763c6d7b app-containers/containerd: Update from 1.7.2 to 1.7.3 2023-07-28 08:16:24 +00:00
flatcar-ci
a14af24bc6 New version: main-3678.0.0-nightly-20230727-2100 2023-07-27 21:00:28 +00:00
Dongsu Park
6a2f155526 changelog: add security changelog for openssh 9.3_p2 2023-07-27 16:16:06 +02:00
Krzesimir Nowak
67275491ee net-misc/openssh: Apply Flatcar modifications
- Mark the package as stable.
- Remove the socket unit's rate limiting.
- Fixes to configuration handling. We are trying to upstream these
  changes, so this package will be eventually moved to
  portage-stable. But updating it in coreos-overlay for now to drop
  the use of the obsolete cygwin USE flags.

Upstream PR: https://github.com/gentoo/gentoo/pull/31615
2023-07-27 16:11:02 +02:00
Dongsu Park
4be18df704 overlay net-misc/openssh: update to 9.3_p2
Update net-misc/openssh to 9.3_p2, mainly address CVE-2023-38408.

Gentoo ref: ee25b7d5358f42edd851c00492a885faaf2e349c
2023-07-27 16:10:59 +02:00
flatcar-ci
d9c6b37c56 New version: main-3677.0.0-nightly-20230726-2100 2023-07-26 21:00:32 +00:00
flatcar-ci
254e4c7a41 New version: main-3676.0.0-nightly-20230725-2100 2023-07-25 21:00:32 +00:00
Thilo Fromm
02cb8e7fd6
Merge pull request #1005 from flatcar/t-lo/update-to-cncf-code-of-conduct
Update code-of-conduct.md
2023-07-25 09:42:37 +02:00
flatcar-ci
a85e4ffb91 New version: main-3675.0.0-nightly-20230724-2100 2023-07-24 21:00:31 +00:00
Thilo Fromm
3aac5e6f28
Update code-of-conduct.md 2023-07-24 18:20:39 +02:00
Dongsu Park
679f0f1236
Merge pull request #999 from flatcar/dongsu/openldap-2.5.14
net-nds/openldap: update to 2.5.14
2023-07-24 17:42:37 +02:00
Dongsu Park
4cec3b6b0c .github: add net-nds/openldap to portage packages list
Add net-nds/openldap to portage packages list for weekly updates.
2023-07-24 17:41:15 +02:00
Dongsu Park
0f5cf3eeba changelog: add changelog for openldap 2.5.14 2023-07-24 17:41:15 +02:00
Dongsu Park
ed7a926902 overlay profiles: mask openldap 2.6.3
Do not update to openldap 2.6.3+, to take different steps of updating
openldap.

1) from 2.4 to 2.5,
2) do an Alpha release around 2023-08, and
3) finally update from 2.5 to 2.6.
2023-07-24 17:41:11 +02:00
Dongsu Park
027e1ca222
Merge pull request #988 from flatcar/go-1.19.11-and-1.20.6-main
Upgrade Go from 1.19.10 and 1.20.5 to 1.19.11 and 1.20.6
2023-07-24 17:07:54 +02:00
flatcar-ci
ca9115ea46 New version: main-3672.0.0-nightly-20230721-2100-INTERMEDIATE 2023-07-21 21:00:25 +00:00
flatcar-ci
0a48501c0d New version: main-3671.0.0-nightly-20230720-2100 2023-07-20 21:00:30 +00:00
Dongsu Park
648853c768
Merge pull request #998 from flatcar/runc-1.1.8-main
Upgrade Runc in main from 1.1.7 to 1.1.8
2023-07-20 16:02:31 +02:00
Dongsu Park
031a66fbd6 portage net-nds/openldap: update to 2.5.14
Update net-nds/openldap to 2.5.14 mainly to address CVE-2023-2953.

Gentoo ref: 5b1520ea69d410ab743eb7998b5d886bbf597375
2023-07-20 12:09:35 +02:00
Dongsu Park
f36ae06dd7 overlay app-containers/docker-cli: vendor docker client for fixing invalid header
To fix invalid header issue that started to happen when being built with
Go 1.19.11+, it is necessary for the docker cli repo to vendor the new docker
client part of github.com/docker/docker.

Based on https://github.com/docker/cli/commit/5d4e44df90bb.
2023-07-20 10:23:28 +02:00
Dongsu Park
3d1c3a66c0 overlay app-containers/docker-cli: Apply Flatcar modifications
Apply Flatcar patches, based on commit
817ad4c0db.
2023-07-20 10:20:48 +02:00
Dongsu Park
82045f0fd4 overlay app-containers/docker-cli: reset to Gentoo
Reset to the state according to the state of Gentoo upstream,
to commit b93160fedf.
to create Flatcar patches on top of that.
2023-07-20 10:18:40 +02:00
Dongsu Park
908df5f157 overlay app-containers/docker: fix invalid headers issue with Go 1.19.11
Docker client and daemon started to fail at sending or handling most
local connections when being compiled with Go 1.19.11, which addresses
CVE-2023-29406 by blocking invalid host headers of HTTP/1. As a
workaround, Docker started to define a dummy host header, and to use
it for local connections.

Backport the fixes to Flatcar to fix the runtime failures.

See also https://github.com/moby/moby/issues/45935,
https://github.com/moby/moby/pull/45942.
2023-07-20 10:11:47 +02:00
Dongsu Park
3d001c577d overlay app-containers/docker: Apply Flatcar modifications
Apply Flatcar patches, based on commit
9d6af12f1c.
2023-07-20 10:11:47 +02:00
Dongsu Park
c7209aaf50 overlay app-containers/docker: reset to Gentoo
Reset to the state according to the state of Gentoo upstream,
to commit 964117a9a2,
to create Flatcar patches on top of that.
2023-07-20 10:11:47 +02:00
Flatcar Buildbot
e4764ac549 app-containers/runc: Update from 1.1.7 to 1.1.8 2023-07-20 07:55:08 +00:00
Jeremi Piotrowski
75904af319
Merge pull request #979 from krishjainx/remove-sdk-errors
Check the url in get_sdk_binhost before echoing
2023-07-20 09:27:14 +02:00
flatcar-ci
b3154069a0 New version: main-3670.0.0-nightly-20230719-2100 2023-07-19 21:00:25 +00:00
Dongsu Park
5b271c4e49
Merge pull request #993 from flatcar/mantle-update-main
Upgrade mantle container image to latest HEAD in main
2023-07-19 10:23:09 +02:00