diff --git a/LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md b/LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md index e56153711b5..73f964719c8 100644 --- a/LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md +++ b/LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md @@ -17,7 +17,7 @@ The Azure Linux SPEC files originated from a variety of sources with varying lic | OpenEuler | [BSD-3 License](https://github.com/pytorch/pytorch/blob/master/LICENSE) | pytorch | | OpenMamba | [Openmamba GPLv2 License](https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt) | bash-completion | | OpenSUSE | Following [openSUSE guidelines](https://en.opensuse.org/openSUSE:Specfile_guidelines#Specfile_Licensing) | ant
ant-junit
antlr
aopalliance
apache-commons-beanutils
apache-commons-cli
apache-commons-codec
apache-commons-collections
apache-commons-collections4
apache-commons-compress
apache-commons-daemon
apache-commons-dbcp
apache-commons-digester
apache-commons-httpclient
apache-commons-io
apache-commons-jexl
apache-commons-lang
apache-commons-lang3
apache-commons-logging
apache-commons-net
apache-commons-pool
apache-commons-pool2
apache-commons-validator
apache-commons-vfs2
apache-parent
args4j
atinject
base64coder
bcel
bea-stax
beust-jcommander
bsf
byaccj
cal10n
cdparanoia
cglib
cni
containerized-data-importer
cpulimit
cri-o
ecj
fillup
flux
gd
geronimo-specs
glassfish-annotation-api
gnu-getopt
gnu-regexp
golang-packaging
guava
hamcrest
hawtjni-runtime
httpcomponents-core
influx-cli
influxdb
jakarta-taglibs-standard
jansi
jarjar
java-cup
java-cup-bootstrap
javacc
javacc-bootstrap
javassist
jboss-interceptors-1.2-api
jdepend
jflex
jflex-bootstrap
jlex
jline
jna
jsch
jsoup
jsr-305
jtidy
junit
junitperf
jzlib
kubevirt
kured
libcontainers-common
libtheora
libva
libvdpau
lynx
multus
objectweb-anttask
objectweb-asm
objenesis
oro
osgi-annotation
osgi-compendium
osgi-core
patterns-ceph-containers
plexus-classworlds
plexus-interpolation
plexus-utils
proj
psl-make-dafsa
publicsuffix
qdox
regexp
relaxngDatatype
rhino
ripgrep
servletapi4
servletapi5
shapelib
slf4j
trilead-ssh2
virtiofsd
xalan-j2
xbean
xcursor-themes
xerces-j2
xml-commons-apis
xml-commons-resolver
xmldb-api
xmlrpc-c
xmlunit
xpp2
xpp3
xz-java | -| Photon | [Photon License](LICENSE-PHOTON.md) and [Photon Notice](NOTICE.APACHE2).
Also see [LICENSE-EXCEPTIONS.PHOTON](LICENSE-EXCEPTIONS.PHOTON). | acl
alsa-lib
alsa-utils
ansible
apr
apr-util
asciidoc
atftp
audit
autoconf
autoconf-archive
autofs
autogen
automake
babel
bash
bc
bcc
bind
binutils
bison
blktrace
boost
btrfs-progs
bubblewrap
build-essential
bzip2
c-ares
cairo
cassandra
cassandra-driver
cdrkit
check
chkconfig
chrpath
cifs-utils
clang
cloud-init
cloud-utils-growpart
cmake
cni-plugins
core-packages
coreutils
cpio
cppunit
cqlsh
cracklib
crash
crash-gcore-command
createrepo_c
cri-tools
cronie
curl
cyrus-sasl
cyrus-sasl-bootstrap
dbus
dbus-glib
dejagnu
device-mapper-multipath
dialog
diffutils
dkms
dmidecode
dnsmasq
docbook-dtd-xml
docbook-style-xsl
dosfstools
dracut
dstat
e2fsprogs
ed
efibootmgr
efivar
elfutils
emacs
erlang
etcd
ethtool
expat
expect
fcgi
file
filesystem
findutils
flex
fontconfig
fping
freetype
fuse
gawk
gc
gcc
gdb
gdbm
gettext
git
git-lfs
glib
glib-networking
glibc
glibmm
gmp
gnome-common
gnupg2
gnuplot
gnutls
gobject-introspection
golang
golang-1.23
gperf
gperftools
gpgme
gptfdisk
grep
groff
grub2
gtest
gtk-doc
guile
gzip
haproxy
harfbuzz
haveged
hdparm
http-parser
httpd
i2c-tools
iana-etc
icu
initramfs
initscripts
inotify-tools
intltool
iotop
iperf3
iproute
ipset
iptables
iputils
ipvsadm
ipxe
irqbalance
itstool
jansson
jq
json-c
json-glib
kbd
keepalived
kernel
kernel-64k
kernel-headers
kernel-hwe
kernel-hwe-headers
kernel-ipe
kernel-lpg-innovate
kernel-mshv
kernel-rt
kernel-uvm
keyutils
kmod
krb5
less
libaio
libarchive
libassuan
libatomic_ops
libcap
libcap-ng
libconfig
libdb
libdnet
libedit
libestr
libevent
libfastjson
libffi
libgcrypt
libgpg-error
libgssglue
libgudev
libjpeg-turbo
libksba
liblogging
libmbim
libmnl
libmodulemd
libmpc
libmspack
libndp
libnetfilter_conntrack
libnetfilter_cthelper
libnetfilter_cttimeout
libnetfilter_queue
libnfnetlink
libnftnl
libnl3
libnsl2
libpcap
libpipeline
libpng
libpsl
libqmi
librelp
librepo
librsync
libseccomp
libselinux
libsepol
libserf
libsigc++30
libsolv
libsoup
libssh2
libtalloc
libtar
libtasn1
libtiff
libtirpc
libtool
libunistring
libunwind
libusb
libvirt
libwebp
libxml2
libxslt
libyaml
linux-firmware
lldb
lldpad
llvm
lm-sensors
lmdb
log4cpp
logrotate
lshw
lsof
lsscsi
ltrace
lttng-tools
lttng-ust
lvm2
lz4
lzo
m2crypto
m4
make
man-db
man-pages
maven
mc
mercurial
meson
mlocate
ModemManager
mpfr
msr-tools
mysql
nano
nasm
ncurses
ndctl
net-snmp
net-tools
nettle
newt
nfs-utils
nghttp2
nginx
ninja-build
nodejs
npth
nspr
nss
nss-altfiles
ntp
numactl
nvme-cli
oniguruma
OpenIPMI
openldap
openscap
openssh
openvswitch
ostree
pam
pango
parted
patch
pciutils
perl-Canary-Stability
perl-CGI
perl-common-sense
perl-Crypt-SSLeay
perl-DBD-SQLite
perl-DBI
perl-DBIx-Simple
perl-Exporter-Tiny
perl-File-HomeDir
perl-File-Which
perl-IO-Socket-SSL
perl-JSON-Any
perl-JSON-XS
perl-libintl-perl
perl-List-MoreUtils
perl-Module-Build
perl-Module-Install
perl-Module-ScanDeps
perl-Net-SSLeay
perl-NetAddr-IP
perl-Object-Accessor
perl-Path-Class
perl-Try-Tiny
perl-Types-Serialiser
perl-WWW-Curl
perl-XML-Parser
perl-YAML
perl-YAML-Tiny
pgbouncer
pinentry
polkit
popt
postgresql
procps-ng
protobuf
protobuf-c
psmisc
pth
pyasn1-modules
pyOpenSSL
pyparsing
pytest
python-appdirs
python-asn1crypto
python-atomicwrites
python-attrs
python-bcrypt
python-certifi
python-cffi
python-chardet
python-configobj
python-constantly
python-coverage
python-cryptography
python-daemon
python-dateutil
python-defusedxml
python-distro
python-docopt
python-docutils
python-ecdsa
python-geomet
python-gevent
python-hyperlink
python-hypothesis
python-idna
python-imagesize
python-incremental
python-iniparse
python-ipaddr
python-jinja2
python-jmespath
python-jsonpatch
python-jsonpointer
python-jsonschema
python-lockfile
python-lxml
python-mako
python-markupsafe
python-mistune
python-msgpack
python-netaddr
python-netifaces
python-ntplib
python-oauthlib
python-packaging
python-pam
python-pbr
python-ply
python-prettytable
python-psutil
python-psycopg2
python-py
python-pyasn1
python-pycodestyle
python-pycparser
python-pycurl
python-pygments
python-pynacl
python-requests
python-setuptools_scm
python-simplejson
python-six
python-snowballstemmer
python-sphinx-theme-alabaster
python-twisted
python-urllib3
python-vcversioner
python-virtualenv
python-wcwidth
python-webob
python-websocket-client
python-werkzeug
python-zope-event
python-zope-interface
python3
pytz
PyYAML
rapidjson
readline
rng-tools
rpcbind
rpcsvc-proto
rpm
rpm-ostree
rrdtool
rsync
rsyslog
ruby
rust
rust-1.75
scons
sed
sg3_utils
shadow-utils
slang
snappy
socat
sqlite
sshpass
strace
subversion
sudo
swig
syslinux
syslog-ng
sysstat
systemd-bootstrap
systemtap
tar
tboot
tcl
tcpdump
tcsh
tdnf
telegraf
texinfo
tmux
tpm2-abrmd
tpm2-pkcs11
tpm2-pytss
tpm2-tools
tpm2-tss
traceroute
tree
tzdata
unbound
unixODBC
unzip
usbutils
userspace-rcu
utf8proc
util-linux
valgrind
vim
vsftpd
WALinuxAgent
which
wpa_supplicant
xfsprogs
xinetd
xmlsec1
xmlto
xz
zchunk
zeromq
zip
zlib
zsh | +| Photon | [Photon License](LICENSE-PHOTON.md) and [Photon Notice](NOTICE.APACHE2).
Also see [LICENSE-EXCEPTIONS.PHOTON](LICENSE-EXCEPTIONS.PHOTON). | acl
alsa-lib
alsa-utils
ansible
apr
apr-util
asciidoc
atftp
audit
autoconf
autoconf-archive
autofs
autogen
automake
babel
bash
bc
bcc
bind
binutils
bison
blktrace
boost
btrfs-progs
bubblewrap
build-essential
bzip2
c-ares
cairo
cassandra
cassandra-driver
cdrkit
check
chkconfig
chrpath
cifs-utils
clang
cloud-init
cloud-utils-growpart
cmake
cni-plugins
core-packages
coreutils
cpio
cppunit
cqlsh
cracklib
crash
crash-gcore-command
createrepo_c
cri-tools
cronie
curl
cyrus-sasl
cyrus-sasl-bootstrap
dbus
dbus-glib
dejagnu
device-mapper-multipath
dialog
diffutils
dkms
dmidecode
dnsmasq
docbook-dtd-xml
docbook-style-xsl
dosfstools
dracut
dstat
e2fsprogs
ed
efibootmgr
efivar
elfutils
emacs
erlang
etcd
ethtool
expat
expect
fcgi
file
filesystem
findutils
flex
fontconfig
fping
freetype
fuse
gawk
gc
gcc
gdb
gdbm
gettext
git
git-lfs
glib
glib-networking
glibc
glibmm
gmp
gnome-common
gnupg2
gnuplot
gnutls
gobject-introspection
golang
golang-1.23
golang-1.24
gperf
gperftools
gpgme
gptfdisk
grep
groff
grub2
gtest
gtk-doc
guile
gzip
haproxy
harfbuzz
haveged
hdparm
http-parser
httpd
i2c-tools
iana-etc
icu
initramfs
initscripts
inotify-tools
intltool
iotop
iperf3
iproute
ipset
iptables
iputils
ipvsadm
ipxe
irqbalance
itstool
jansson
jq
json-c
json-glib
kbd
keepalived
kernel
kernel-64k
kernel-headers
kernel-hwe
kernel-hwe-headers
kernel-ipe
kernel-lpg-innovate
kernel-mshv
kernel-rt
kernel-uvm
keyutils
kmod
krb5
less
libaio
libarchive
libassuan
libatomic_ops
libcap
libcap-ng
libconfig
libdb
libdnet
libedit
libestr
libevent
libfastjson
libffi
libgcrypt
libgpg-error
libgssglue
libgudev
libjpeg-turbo
libksba
liblogging
libmbim
libmnl
libmodulemd
libmpc
libmspack
libndp
libnetfilter_conntrack
libnetfilter_cthelper
libnetfilter_cttimeout
libnetfilter_queue
libnfnetlink
libnftnl
libnl3
libnsl2
libpcap
libpipeline
libpng
libpsl
libqmi
librelp
librepo
librsync
libseccomp
libselinux
libsepol
libserf
libsigc++30
libsolv
libsoup
libssh2
libtalloc
libtar
libtasn1
libtiff
libtirpc
libtool
libunistring
libunwind
libusb
libvirt
libwebp
libxml2
libxslt
libyaml
linux-firmware
lldb
lldpad
llvm
lm-sensors
lmdb
log4cpp
logrotate
lshw
lsof
lsscsi
ltrace
lttng-tools
lttng-ust
lvm2
lz4
lzo
m2crypto
m4
make
man-db
man-pages
maven
mc
mercurial
meson
mlocate
ModemManager
mpfr
msr-tools
mysql
nano
nasm
ncurses
ndctl
net-snmp
net-tools
nettle
newt
nfs-utils
nghttp2
nginx
ninja-build
nodejs
npth
nspr
nss
nss-altfiles
ntp
numactl
nvme-cli
oniguruma
OpenIPMI
openldap
openscap
openssh
openvswitch
ostree
pam
pango
parted
patch
pciutils
perl-Canary-Stability
perl-CGI
perl-common-sense
perl-Crypt-SSLeay
perl-DBD-SQLite
perl-DBI
perl-DBIx-Simple
perl-Exporter-Tiny
perl-File-HomeDir
perl-File-Which
perl-IO-Socket-SSL
perl-JSON-Any
perl-JSON-XS
perl-libintl-perl
perl-List-MoreUtils
perl-Module-Build
perl-Module-Install
perl-Module-ScanDeps
perl-Net-SSLeay
perl-NetAddr-IP
perl-Object-Accessor
perl-Path-Class
perl-Try-Tiny
perl-Types-Serialiser
perl-WWW-Curl
perl-XML-Parser
perl-YAML
perl-YAML-Tiny
pgbouncer
pinentry
polkit
popt
postgresql
procps-ng
protobuf
protobuf-c
psmisc
pth
pyasn1-modules
pyOpenSSL
pyparsing
pytest
python-appdirs
python-asn1crypto
python-atomicwrites
python-attrs
python-bcrypt
python-certifi
python-cffi
python-chardet
python-configobj
python-constantly
python-coverage
python-cryptography
python-daemon
python-dateutil
python-defusedxml
python-distro
python-docopt
python-docutils
python-ecdsa
python-geomet
python-gevent
python-hyperlink
python-hypothesis
python-idna
python-imagesize
python-incremental
python-iniparse
python-ipaddr
python-jinja2
python-jmespath
python-jsonpatch
python-jsonpointer
python-jsonschema
python-lockfile
python-lxml
python-mako
python-markupsafe
python-mistune
python-msgpack
python-netaddr
python-netifaces
python-ntplib
python-oauthlib
python-packaging
python-pam
python-pbr
python-ply
python-prettytable
python-psutil
python-psycopg2
python-py
python-pyasn1
python-pycodestyle
python-pycparser
python-pycurl
python-pygments
python-pynacl
python-requests
python-setuptools_scm
python-simplejson
python-six
python-snowballstemmer
python-sphinx-theme-alabaster
python-twisted
python-urllib3
python-vcversioner
python-virtualenv
python-wcwidth
python-webob
python-websocket-client
python-werkzeug
python-zope-event
python-zope-interface
python3
pytz
PyYAML
rapidjson
readline
rng-tools
rpcbind
rpcsvc-proto
rpm
rpm-ostree
rrdtool
rsync
rsyslog
ruby
rust
rust-1.75
scons
sed
sg3_utils
shadow-utils
slang
snappy
socat
sqlite
sshpass
strace
subversion
sudo
swig
syslinux
syslog-ng
sysstat
systemd-bootstrap
systemtap
tar
tboot
tcl
tcpdump
tcsh
tdnf
telegraf
texinfo
tmux
tpm2-abrmd
tpm2-pkcs11
tpm2-pytss
tpm2-tools
tpm2-tss
traceroute
tree
tzdata
unbound
unixODBC
unzip
usbutils
userspace-rcu
utf8proc
util-linux
valgrind
vim
vsftpd
WALinuxAgent
which
wpa_supplicant
xfsprogs
xinetd
xmlsec1
xmlto
xz
zchunk
zeromq
zip
zlib
zsh | | RPM software management source | [GPLv2+ License](https://github.com/rpm-software-management/dnf5/blob/main/COPYING.md) | dnf5 | | Source project | Same as the source project. | python-nocaselist | | Sysbench source | [GPLv2+ License](https://github.com/akopytov/sysbench/blob/master/COPYING) | sysbench | diff --git a/LICENSES-AND-NOTICES/SPECS/data/licenses.json b/LICENSES-AND-NOTICES/SPECS/data/licenses.json index 2b5439e263b..0fc60d32d94 100644 --- a/LICENSES-AND-NOTICES/SPECS/data/licenses.json +++ b/LICENSES-AND-NOTICES/SPECS/data/licenses.json @@ -2767,6 +2767,7 @@ "gobject-introspection", "golang", "golang-1.23", + "golang-1.24", "gperf", "gperftools", "gpgme", diff --git a/SPECS/cf-cli/cf-cli.spec b/SPECS/cf-cli/cf-cli.spec index 205e814a226..b458def9e9a 100644 --- a/SPECS/cf-cli/cf-cli.spec +++ b/SPECS/cf-cli/cf-cli.spec @@ -5,7 +5,7 @@ Summary: The official command line client for Cloud Foundry. Name: cf-cli # Note: Upgrading the package also warrants an upgrade in the CF_BUILD_SHA Version: 8.7.11 -Release: 3%{?dist} +Release: 4%{?dist} License: Apache-2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -37,7 +37,7 @@ Patch1: CVE-2024-45338.patch Patch2: CVE-2025-22869.patch Patch3: CVE-2025-22872.patch -BuildRequires: golang >= 1.18.3 +BuildRequires: golang < 1.25 %global debug_package %{nil} %define our_gopath %{_topdir}/.gopath @@ -69,6 +69,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./out/cf %{_bindir}/cf %changelog +* Sun Aug 31 2025 Andrew Phelps - 8.7.11-4 +- Set BR for golang to < 1.25 + * Tue Apr 22 2025 Archana Shettigar - 8.7.11-3 - Fix CVE-2025-22872 with an upstream patch diff --git a/SPECS/cloud-provider-kubevirt/cloud-provider-kubevirt.spec b/SPECS/cloud-provider-kubevirt/cloud-provider-kubevirt.spec index f2a1694c6ee..4707aa90651 100644 --- a/SPECS/cloud-provider-kubevirt/cloud-provider-kubevirt.spec +++ b/SPECS/cloud-provider-kubevirt/cloud-provider-kubevirt.spec @@ -1,7 +1,7 @@ Summary: Package to create the cloud-provider-kubevirt binary. Name: cloud-provider-kubevirt Version: 0.5.1 -Release: 1%{?dist} +Release: 2%{?dist} License: ASL 2.0 URL: https://github.com/kubevirt/cloud-provider-kubevirt/ Group: System/Management @@ -30,7 +30,7 @@ Patch1: single-ip-address-for-node.patch Patch2: golang-version-upgrade.patch Patch3: instanceexists-watches-vms-instead-of-vmis.patch %global debug_package %{nil} -BuildRequires: golang >= 1.23 +BuildRequires: golang < 1.25 %define our_gopath %{_topdir}/.gopath @@ -69,6 +69,9 @@ make test %{_bindir}/kubevirt-cloud-controller-manager %changelog +* Sun Aug 31 2025 Andrew Phelps - 0.5.1-2 +- Set BR for golang to < 1.25 + * Tue Feb 04 2025 Sharath Srikanth Chellappa 0.5.1-1 - Original version for Azure Linux. - License verified. diff --git a/SPECS/containerd2/containerd2.spec b/SPECS/containerd2/containerd2.spec index 660aa0f52a3..8bc7b48f0bf 100644 --- a/SPECS/containerd2/containerd2.spec +++ b/SPECS/containerd2/containerd2.spec @@ -5,7 +5,7 @@ Summary: Industry-standard container runtime Name: %{upstream_name}2 Version: 2.0.0 -Release: 13%{?dist} +Release: 14%{?dist} License: ASL 2.0 Group: Tools/Container URL: https://www.containerd.io @@ -25,7 +25,7 @@ Patch5: multi-snapshotters-support.patch Patch6: tardev-support.patch %{?systemd_requires} -BuildRequires: golang +BuildRequires: golang < 1.25 BuildRequires: go-md2man BuildRequires: make BuildRequires: systemd-rpm-macros @@ -98,6 +98,9 @@ fi %dir /opt/containerd/lib %changelog +* Sun Aug 31 2025 Andrew Phelps - 2.0.0-14 +- Set BR for golang to < 1.25 + * Mon Jul 21 2025 Saul Paredes - 2.0.0-13 - Add "Provides/Obsoletes:" to shift all installs of moby-containerd-cc to containerd2 diff --git a/SPECS/containerized-data-importer/containerized-data-importer.spec b/SPECS/containerized-data-importer/containerized-data-importer.spec index 65121f5f54e..5e4d94f464d 100644 --- a/SPECS/containerized-data-importer/containerized-data-importer.spec +++ b/SPECS/containerized-data-importer/containerized-data-importer.spec @@ -18,7 +18,7 @@ Summary: Container native virtualization Name: containerized-data-importer Version: 1.57.0 -Release: 14%{?dist} +Release: 15%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -37,7 +37,7 @@ Patch8: CVE-2023-3978.patch Patch9: CVE-2025-27144.patch Patch10: CVE-2025-22868.patch Patch11: CVE-2025-22872.patch -BuildRequires: golang +BuildRequires: golang < 1.25 BuildRequires: golang-packaging BuildRequires: libnbd-devel BuildRequires: pkgconfig @@ -231,6 +231,9 @@ install -m 0644 _out/manifests/release/cdi-cr.yaml %{buildroot}%{_datadir}/cdi/m %{_datadir}/cdi/manifests %changelog +* Sun Aug 31 2025 Andrew Phelps - 1.57.0-15 +- Set BR for golang to < 1.25 + * Tue Apr 22 2025 Archana Shettigar - 1.57.0-14 - Patch CVE-2025-22872 diff --git a/SPECS/coredns/coredns.spec b/SPECS/coredns/coredns.spec index bec1a8d6fcd..ef6a427e7a0 100644 --- a/SPECS/coredns/coredns.spec +++ b/SPECS/coredns/coredns.spec @@ -6,7 +6,7 @@ Summary: Fast and flexible DNS server Name: coredns Version: 1.11.4 -Release: 7%{?dist} +Release: 8%{?dist} License: Apache License 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -42,7 +42,7 @@ Patch3: CVE-2025-30204.patch Patch4: CVE-2024-53259.patch Patch5: CVE-2025-47950.patch -BuildRequires: golang >= 1.23 +BuildRequires: golang < 1.25 %description CoreDNS is a fast and flexible DNS server. @@ -82,6 +82,9 @@ go install github.com/fatih/faillint@latest && \ %{_bindir}/%{name} %changelog +* Sun Aug 31 2025 Andrew Phelps - 1.11.4-8 +- Set BR for golang to < 1.25 + * Tue Jun 17 2025 Aninda Pradhan - 1.11.4-7 - Fix CVE-2025-47950 with an upstream patch diff --git a/SPECS/cri-tools/cri-tools.spec b/SPECS/cri-tools/cri-tools.spec index 4d7f53e3081..d4261b275a4 100644 --- a/SPECS/cri-tools/cri-tools.spec +++ b/SPECS/cri-tools/cri-tools.spec @@ -7,7 +7,7 @@ Summary: CRI tools Name: cri-tools Version: 1.32.0 -Release: 2%{?dist} +Release: 3%{?dist} License: Apache-2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -18,7 +18,7 @@ Patch0: CVE-2024-45338.patch Patch1: CVE-2025-22872.patch BuildRequires: glib-devel BuildRequires: glibc-devel -BuildRequires: golang +BuildRequires: golang < 1.25 %description cri-tools aims to provide a series of debugging and validation tools for Kubelet CRI, which includes: @@ -46,6 +46,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} "${BUILD_FOLDER}/critest" %{_bindir}/critest %changelog +* Sun Aug 31 2025 Andrew Phelps - 1.32.0-3 +- Set BR for golang to < 1.25 + * Thu May 22 2025 Aninda Pradhan - 1.32.0-2 - Patch CVE-2025-22872 diff --git a/SPECS/dcos-cli/dcos-cli.spec b/SPECS/dcos-cli/dcos-cli.spec index 19fb08e1685..6d484ea50c5 100644 --- a/SPECS/dcos-cli/dcos-cli.spec +++ b/SPECS/dcos-cli/dcos-cli.spec @@ -1,7 +1,7 @@ Summary: The command line for DC/OS Name: dcos-cli Version: 1.2.0 -Release: 18%{?dist} +Release: 19%{?dist} License: Apache-2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -13,7 +13,7 @@ Patch1: CVE-2024-28180.patch Patch2: CVE-2025-27144.patch Patch3: CVE-2024-51744.patch -BuildRequires: golang >= 1.17.1 +BuildRequires: golang < 1.25 BuildRequires: git %global debug_package %{nil} %define our_gopath %{_topdir}/.gopath @@ -49,6 +49,9 @@ go test -mod=vendor %{_bindir}/dcos %changelog +* Sun Aug 31 2025 Andrew Phelps - 1.2.0-19 +- Set BR for golang to < 1.25 + * Wed Mar 19 2025 Jyoti Kanase - 1.2.0-18 - Fix CVE-2024-51744 diff --git a/SPECS/docker-buildx/docker-buildx.spec b/SPECS/docker-buildx/docker-buildx.spec index b949eed0c22..5e366d2a757 100644 --- a/SPECS/docker-buildx/docker-buildx.spec +++ b/SPECS/docker-buildx/docker-buildx.spec @@ -4,7 +4,7 @@ Summary: A Docker CLI plugin for extended build capabilities with BuildKi Name: docker-buildx # update "commit_hash" above when upgrading version Version: 0.14.0 -Release: 6%{?dist} +Release: 7%{?dist} License: ASL 2.0 Group: Tools/Container Vendor: Microsoft Corporation @@ -18,7 +18,7 @@ Patch3: CVE-2025-0495.patch Patch4: CVE-2025-22872.patch BuildRequires: bash -BuildRequires: golang +BuildRequires: golang < 1.25 # conflicting packages Conflicts: docker-ce @@ -49,6 +49,9 @@ install -m 755 buildx "%{buildroot}%{_libexecdir}/docker/cli-plugins/docker-buil %{_libexecdir}/docker/cli-plugins/docker-buildx %changelog +* Sun Aug 31 2025 Andrew Phelps - 0.14.0-7 +- Set BR for golang to < 1.25 + * Wed May 21 2025 Sreeniavsulu Malavathula - 0.14-0-6 - Patch CVE-2025-22872 diff --git a/SPECS/flannel/flannel.spec b/SPECS/flannel/flannel.spec index eebe807cf0a..71003ef5565 100644 --- a/SPECS/flannel/flannel.spec +++ b/SPECS/flannel/flannel.spec @@ -19,7 +19,7 @@ Patch4: CVE-2024-51744.patch BuildRequires: gcc BuildRequires: glibc-devel BuildRequires: glibc-static >= 2.38-12%{?dist} -BuildRequires: golang >= 1.20 +BuildRequires: golang < 1.25 BuildRequires: kernel-headers %description @@ -52,6 +52,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./dist/flanneld %{_bindir}/flanneld %changelog +* Sun Aug 31 2025 Andrew Phelps - 0.24.2-16 +- Set BR for golang to < 1.25 + * Mon Aug 25 2025 Andrew Phelps - 0.24.2-16 - Bump to rebuild with updated glibc diff --git a/SPECS/golang-packaging/golang-packaging.spec b/SPECS/golang-packaging/golang-packaging.spec index e30cf8933d2..d5bdcdb0e6d 100644 --- a/SPECS/golang-packaging/golang-packaging.spec +++ b/SPECS/golang-packaging/golang-packaging.spec @@ -18,7 +18,7 @@ Name: golang-packaging Version: 15.0.17 -Release: 1%{?dist} +Release: 2%{?dist} Summary: A toolchain to help packaging golang License: GPLv3 Vendor: Microsoft Corporation @@ -29,7 +29,7 @@ URL: https://github.com/openSUSE/%{name} Source0: %{name}-%{version}.tar.gz BuildRequires: rpm BuildRequires: xz -Requires: go +Recommends: go BuildArch: noarch %description @@ -59,6 +59,9 @@ install -m0644 macros.go %{buildroot}%{_sysconfdir}/rpm/ %config %{_sysconfdir}/rpm/macros.go %changelog +* Tue Sep 02 2025 Andrew Phelps - 15.0.17-2 +- Change to "Recommends: go" to resolve build conflict with golang 1.24 and 1.25 + * Fri Oct 27 2023 CBL-Mariner Servicing Account - 15.0.17-1 - Auto-upgrade to 15.0.17 - Azure Linux 3.0 - package upgrades diff --git a/SPECS/golang/golang-1.24.signatures.json b/SPECS/golang/golang-1.24.signatures.json new file mode 100644 index 00000000000..2e580b0f119 --- /dev/null +++ b/SPECS/golang/golang-1.24.signatures.json @@ -0,0 +1,9 @@ +{ + "Signatures": { + "go.20230802.5.src.tar.gz": "56b9e0e0c3c13ca95d5efa6de4e7d49a9d190eca77919beff99d33cd3fa74e95", + "go.20240206.2.src.tar.gz": "7982e0011aa9ab95fd0530404060410af4ba57326d26818690f334fdcb6451cd", + "go1.22.12-20250211.4.src.tar.gz": "e1cc3bff8fdf1f24843ffc9f0eaddfd344eb40fd9ca0d9ba2965165be519eeb7", + "go1.24.6-20250806.4.src.tar.gz": "3a1108d710b5916c5c6477a3052c870a543f129428267bf6939a4f96a5a8b95c", + "go1.4-bootstrap-20171003.tar.gz": "f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52" + } +} diff --git a/SPECS/golang/golang-1.24.spec b/SPECS/golang/golang-1.24.spec new file mode 100644 index 00000000000..d1313d71b12 --- /dev/null +++ b/SPECS/golang/golang-1.24.spec @@ -0,0 +1,389 @@ +%global goroot %{_libdir}/golang +%global gopath %{_datadir}/gocode +%global ms_go_filename go1.24.6-20250806.4.src.tar.gz +%global ms_go_revision 1 +%ifarch aarch64 +%global gohostarch arm64 +%else +%global gohostarch amd64 +%endif +%define debug_package %{nil} +%define __strip /bin/true +# rpmbuild magic to keep from having meta dependency on libc.so.6 +%define _use_internal_dependency_generator 0 +%define __find_requires %{nil} +Summary: Go +Name: golang +Version: 1.24.6 +Release: 1%{?dist} +License: BSD-3-Clause +Vendor: Microsoft Corporation +Distribution: Azure Linux +Group: System Environment/Security +URL: https://github.com/microsoft/go +Source0: https://github.com/microsoft/go/releases/download/v%{version}-%{ms_go_revision}/%{ms_go_filename} + +# bootstrap 00, same content as https://dl.google.com/go/go1.4-bootstrap-20171003.tar.gz +Source1: https://github.com/microsoft/go/releases/download/v1.4.0-1/go1.4-bootstrap-20171003.tar.gz +Patch0: go14_bootstrap_aarch64.patch +# bootstrap 01 +Source2: https://github.com/microsoft/go/releases/download/v1.19.12-1/go.20230802.5.src.tar.gz +# bootstrap 02 +Source3: https://github.com/microsoft/go/releases/download/v1.20.14-1/go.20240206.2.src.tar.gz +# bootstrap 03 +Source4: https://github.com/microsoft/go/releases/download/v1.22.12-2/go1.22.12-20250211.4.src.tar.gz + +Provides: %{name} = %{version} +Provides: go = %{version}-%{release} +Provides: golang = %{version}-%{release} +Provides: msft-golang = %{version}-%{release} + +%description +Go is an open source programming language that makes it easy to build simple, reliable, and efficient software. + +%prep +# Setup bootstrap source +tar xf %{SOURCE1} --no-same-owner +patch -Np1 --ignore-whitespace < %{PATCH0} +mv -v go go-bootstrap-00 + +tar xf %{SOURCE2} --no-same-owner +mv -v go go-bootstrap-01 + +tar xf %{SOURCE3} --no-same-owner +mv -v go go-bootstrap-02 + +tar xf %{SOURCE4} --no-same-owner +mv -v go go-bootstrap-03 + +%setup -q -n go + +%build +# go 1.4 bootstraps with C. +# go 1.20 bootstraps with go >= 1.17.13 +# go >= 1.22 bootstraps with go >= 1.20.14 +# +# These conditions make building the current go compiler from C a multistep +# process. Approximately once a year, the bootstrap requirement is moved +# forward, adding another step. +# +# PS: Since go compiles fairly quickly, the extra overhead is around 2-3 minutes +# on a reasonable machine. + +# Use prev bootstrap to compile next bootstrap. +function go_bootstrap() { + local bootstrap=$1 + local new_root=%{_topdir}/BUILD/go-bootstrap-${bootstrap} + ( + cd ${new_root}/src + CGO_ENABLED=0 ./make.bash + ) + # Nuke the older bootstrapper + rm -rf %{_libdir}/golang + # Install the new bootstrapper + mv -v $new_root %{_libdir}/golang + export GOROOT=%{_libdir}/golang + export GOROOT_BOOTSTRAP=%{_libdir}/golang +} + +go_bootstrap 00 +go_bootstrap 01 +go_bootstrap 02 +go_bootstrap 03 + +# Build current go version +export GOHOSTOS=linux +export GOHOSTARCH=%{gohostarch} +export GOROOT_BOOTSTRAP=%{goroot} + +export GOROOT="`pwd`" +export GOPATH=%{gopath} +export GOROOT_FINAL=%{_bindir}/go +rm -f %{gopath}/src/runtime/*.c +( + cd src + ./make.bash --no-clean +) + +%install + +mkdir -p %{buildroot}%{_bindir} +mkdir -p %{buildroot}%{goroot} + +cp -R api bin doc lib pkg src misc VERSION go.env %{buildroot}%{goroot} + +# remove the unnecessary zoneinfo file (Go will always use the system one first) +rm -rfv %{buildroot}%{goroot}/lib/time + +# remove the doc Makefile +rm -rfv %{buildroot}%{goroot}/doc/Makefile + +# put binaries to bindir, linked to the arch we're building, +# leave the arch independent pieces in %{goroot} +mkdir -p %{buildroot}%{goroot}/bin/linux_%{gohostarch} +ln -sfv ../go %{buildroot}%{goroot}/bin/linux_%{gohostarch}/go +ln -sfv ../gofmt %{buildroot}%{goroot}/bin/linux_%{gohostarch}/gofmt +ln -sfv %{goroot}/bin/gofmt %{buildroot}%{_bindir}/gofmt +ln -sfv %{goroot}/bin/go %{buildroot}%{_bindir}/go + +# ensure these exist and are owned +mkdir -p %{buildroot}%{gopath}/src/github.com/ +mkdir -p %{buildroot}%{gopath}/src/bitbucket.org/ +mkdir -p %{buildroot}%{gopath}/src/code.google.com/p/ + +# This file is not necessary: recent Go toolsets have good defaults. +# Keep the file, but leave it blank. This makes the upgrade path very simple. +install -vdm755 %{buildroot}%{_sysconfdir}/profile.d +cat >> %{buildroot}%{_sysconfdir}/profile.d/go-exports.sh <<- "EOF" +EOF + +%post -p /sbin/ldconfig + +%postun +/sbin/ldconfig +if [ $1 -eq 0 ]; then + # This is uninstall + rm -rf /opt/go + exit 0 +fi + +%files +%defattr(-,root,root) +%license LICENSE +%exclude %{goroot}/src/*.rc +%exclude %{goroot}/include/plan9 +%{_sysconfdir}/profile.d/go-exports.sh +%{goroot}/* +%{gopath}/src +%exclude %{goroot}/src/pkg/debug/dwarf/testdata +%exclude %{goroot}/src/pkg/debug/elf/testdata +%{_bindir}/* + +%changelog +* Wed Aug 06 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.6-1 +- Bump version to 1.24.6-1 + +* Tue Jul 08 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.5-1 +- Bump version to 1.24.5-1 + +* Fri Jun 06 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.4-1 +- Bump version to 1.24.4-1 + +* Wed May 07 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.3-1 +- Bump version to 1.24.3-1 + +* Tue Apr 01 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.2-1 +- Bump version to 1.24.2-1 + +* Wed Mar 05 2025 Microsoft Golang Bot - 1.24.1-1 +- Bump version to 1.24.1-1 + +* Fri Feb 14 2025 Microsoft Golang Bot - 1.24.0-1 +- Bump version to 1.24.0-1 + +* Tue Feb 04 2025 Tobias Brick - 1.23.3-3 +- Fix post scriptlet +- Remove calls to alternatives +- Don't manually delete go-exports.sh + +* Tue Dec 03 2024 Microsoft Golang Bot - 1.23.3-2 +- Bump version to 1.23.3-2 + +* Fri Nov 08 2024 Microsoft Golang Bot - 1.23.3-1 +- Bump version to 1.23.3-1 + +* Tue Oct 08 2024 Muhammad Falak - 1.23.1-1 +- Upgrade to 1.23.1 + +* Thu Sep 26 2024 Microsoft Golang Bot - 1.22.7-2 +- Bump version to 1.22.7-3 + +* Fri Sep 06 2024 Microsoft Golang Bot - 1.22.7-1 +- Bump version to 1.22.7-1 + +* Wed Aug 07 2024 Davis Goodin - 1.22.6-1 +- Bump version to 1.22.6-1 + +* Tue Jul 02 2024 Davis Goodin - 1.22.5-1 +- Bump version to 1.22.5-1 + +* Tue Jun 04 2024 Davis Goodin - 1.22.4-1 +- Bump version to 1.22.4-1 + +* Mon May 27 2024 Davis Goodin - 1.22.3-1 +- Bump version to 1.22.3-1 + +* Wed May 08 2024 Davis Goodin - 1.21.9-2 +- Remove explicit Go env variable defaults + +* Wed Apr 03 2024 Davis Goodin - 1.21.9-1 +- Bump version to 1.21.9-1 + +* Thu Mar 21 2024 Davis Goodin - 1.21.8-1 +- Bump version to 1.21.8-1, build version to 1.21.8-2 + +* Thu Feb 22 2024 Muhammad Falak - 1.21.6-2 +- Include go.env file in GOROOT + +* Wed Jan 24 2024 Davis Goodin - 1.21.6-1 +- Bump version to 1.21.6-1 +- Switch from upstream Go to the Microsoft build of Go + +* Mon Oct 16 2023 Nan Liu - 1.20.10-1 +- Bump version to 1.20.10 to address CVE-2023-29409, CVE-2023-39318, CVE-2023-39319, CVE-2023-39323, CVE-2023-39533, CVE-2023-29406, CVE-2023-39325, CVE-2023-44487 +- Remove patches that no longer apply + +* Tue Oct 10 2023 Dan Streetman - 1.20.7-2 +- Patch CVE-2023-44487 + +* Tue Aug 15 2023 Muhammad Falak - 1.20.7-1 +- Bump version to 1.20.7 +- Introduce patch to permit requests with invalid host header + +* Tue Aug 15 2023 Muhammad Falak - 1.19.12-1 +- Auto-upgrade to 1.19.12 to address CVE-2023-29409 +- Introduce patch to permit requests with invalid header + +* Thu Jul 13 2023 CBL-Mariner Servicing Account - 1.19.11-1 +- Auto-upgrade to 1.19.11 - Fix CVE-2023-29406 + +* Thu Jun 15 2023 CBL-Mariner Servicing Account - 1.19.10-1 +- Auto-upgrade to 1.19.10 - address CVE-2023-24540, CVE-2023-29402, CVE-2023-29403, CVE-2023-29404, CVE-2023-29405 + +* Wed Apr 05 2023 CBL-Mariner Servicing Account - 1.19.8-1 +- Auto-upgrade to 1.19.8 - address CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538 + +* Tue Mar 28 2023 CBL-Mariner Servicing Account - 1.19.7-1 +- Auto-upgrade to 1.19.7 - address CVE-2023-24532 + +* Wed Mar 15 2023 CBL-Mariner Servicing Account - 1.19.6-1 +- Auto-upgrade to 1.19.6 - Address CVE-2022-41722, CVE-2022-41724, CVE-2022-41725, CVE-2022-41723 + +* Fri Feb 03 2023 CBL-Mariner Servicing Account - 1.19.5-1 +- Auto-upgrade to 1.19.5 - upgrade to latest + +* Wed Jan 18 2023 CBL-Mariner Servicing Account - 1.19.4-1 +- Auto-upgrade to 1.19.4 + +* Thu Dec 15 2022 Daniel McIlvaney - 1.18.8-2 +- Patch CVE-2022-41717 + +* Tue Nov 01 2022 Olivia Crain - 1.18.8-1 +- Upgrade to version 1.18.8 (fixes CVE-2022-41716, which only applies to Windows environments) +- Also fixes CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 (fixed in 1.18.7) +- Also fixes CVE-2022-27664, CVE-2022-32190 (fixed in 1.18.6) +- Use SPDX short identifier for license tag + +* Fri Aug 19 2022 Olivia Crain - 1.18.5-1 +- Upgrade to version to fix CVE-2022-1705, CVE-2022-1962, CVE-2022-28131, + CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635, + CVE-2022-32148, and CVE-2022-32189 + +* Tue Jun 14 2022 Muhammad Falak - 1.18.3-1 +- Bump version to 1.18.3 to address CVE-2022-24675 & CVE-2022-28327 + +* Tue Apr 12 2022 Muhammad Falak - 1.17.8-1 +- Bump version to 1.17.8 to address CVE-2021-44716 + +* Thu Feb 17 2022 Andrew Phelps - 1.17.1-2 +- Use _topdir instead of hard-coded value /usr/src/mariner +- License verified + +* Wed Sep 15 2021 Andrew Phelps - 1.17.1-1 +- Updated to version 1.17.1 + +* Tue Jun 08 2021 Henry Beberman - 1.15.13-1 +- Updated to version 1.15.13 to fix CVE-2021-33194 and CVE-2021-31525 + +* Mon Apr 26 2021 Nicolas Guibourge - 1.15.11-1 +- Updated to version 1.15.11 to fix CVE-2021-27918 + +* Wed Feb 03 2021 Andrew Phelps - 1.15.7-1 +- Updated to version 1.15.7 to fix CVE-2021-3114 + +* Mon Nov 23 2020 Henry Beberman - 1.15.5-1 +- Updated to version 1.15.5 + +* Fri Oct 30 2020 Thomas Crain - 1.13.15-2 +- Patch CVE-2020-24553 + +* Tue Sep 08 2020 Nicolas Ontiveros - 1.13.15-1 +- Updated to version 1.13.15, which fixes CVE-2020-14039 and CVE-2020-16845. + +* Sun May 24 2020 Mateusz Malisz - 1.13.11-1 +- Updated to version 1.13.11 + +* Sat May 09 2020 Nick Samson - 1.12.5-7 +- Added %%license line automatically + +* Thu Apr 30 2020 Emre Girgin - 1.12.5-6 +- Renaming go to golang + +* Thu Apr 23 2020 Nicolas Ontiveros - 1.12.5-5 +- Fix CVE-2019-14809. + +* Fri Mar 27 2020 Andrew Phelps - 1.12.5-4 +- Support building standalone by adding go 1.4 bootstrap. + +* Thu Feb 27 2020 Henry Beberman - 1.12.5-3 +- Remove meta dependency on libc.so.6 + +* Thu Feb 6 2020 Andrew Phelps - 1.12.5-2 +- Remove ExtraBuildRequires + +* Tue Sep 03 2019 Mateusz Malisz - 1.12.5-1 +- Initial CBL-Mariner import from Photon (license: Apache2). + +* Mon Jan 21 2019 Bo Gan - 1.9.7-1 +- Update to 1.9.7 + +* Wed Oct 24 2018 Alexey Makhalov - 1.9.4-3 +- Use extra build requires + +* Mon Apr 02 2018 Dheeraj Shetty - 1.9.4-2 +- Fix for CVE-2018-7187 + +* Thu Mar 15 2018 Xiaolin Li - 1.9.4-1 +- Update to golang release v1.9.4 + +* Tue Nov 14 2017 Alexey Makhalov - 1.9.1-2 +- Aarch64 support + +* Wed Nov 01 2017 Vinay Kulkarni - 1.9.1-1 +- Update to golang release v1.9.1 + +* Wed May 31 2017 Xiaolin Li - 1.8.1-2 +- Remove mercurial from buildrequires and requires. + +* Tue Apr 11 2017 Danut Moraru - 1.8.1-1 +- Update Golang to version 1.8.1, updated patch0 + +* Wed Dec 28 2016 Xiaolin Li - 1.7.4-1 +- Updated Golang to 1.7.4. + +* Thu Oct 06 2016 ChangLee - 1.6.3-2 +- Modified %check + +* Wed Jul 27 2016 Anish Swaminathan - 1.6.3-1 +- Update Golang to version 1.6.3 - fixes CVE 2016-5386 + +* Fri Jul 8 2016 Harish Udaiya Kumar - 1.6.2-1 +- Updated the Golang to version 1.6.2 + +* Thu Jun 2 2016 Priyesh Padmavilasom - 1.4.2-5 +- Fix script syntax + +* Tue May 24 2016 Priyesh Padmavilasom - 1.4.2-4 +- GA - Bump release of all rpms + +* Thu May 05 2016 Kumar Kaushik - 1.4.2-3 +- Handling upgrade scenario pre/post/un scripts. + +* Wed Dec 09 2015 Anish Swaminathan - 1.4.2-2 +- Edit post script. + +* Mon Aug 03 2015 Vinay Kulkarni - 1.4.2-1 +- Update to golang release version 1.4.2 + +* Fri Oct 17 2014 Divya Thaluru - 1.3.3-1 +- Initial build. First version diff --git a/SPECS/golang/golang.signatures.json b/SPECS/golang/golang.signatures.json index 2e580b0f119..69b63535f09 100644 --- a/SPECS/golang/golang.signatures.json +++ b/SPECS/golang/golang.signatures.json @@ -3,7 +3,7 @@ "go.20230802.5.src.tar.gz": "56b9e0e0c3c13ca95d5efa6de4e7d49a9d190eca77919beff99d33cd3fa74e95", "go.20240206.2.src.tar.gz": "7982e0011aa9ab95fd0530404060410af4ba57326d26818690f334fdcb6451cd", "go1.22.12-20250211.4.src.tar.gz": "e1cc3bff8fdf1f24843ffc9f0eaddfd344eb40fd9ca0d9ba2965165be519eeb7", - "go1.24.6-20250806.4.src.tar.gz": "3a1108d710b5916c5c6477a3052c870a543f129428267bf6939a4f96a5a8b95c", + "go1.25.0-20250812.10.src.tar.gz": "2ff213b27b5a595b0021d4ff9684169a7e54fa4de82ee25e7f79ed9fec5fdd8e", "go1.4-bootstrap-20171003.tar.gz": "f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52" } } diff --git a/SPECS/golang/golang.spec b/SPECS/golang/golang.spec index d1313d71b12..446d167c706 100644 --- a/SPECS/golang/golang.spec +++ b/SPECS/golang/golang.spec @@ -1,6 +1,6 @@ %global goroot %{_libdir}/golang %global gopath %{_datadir}/gocode -%global ms_go_filename go1.24.6-20250806.4.src.tar.gz +%global ms_go_filename go1.25.0-20250812.10.src.tar.gz %global ms_go_revision 1 %ifarch aarch64 %global gohostarch arm64 @@ -14,7 +14,7 @@ %define __find_requires %{nil} Summary: Go Name: golang -Version: 1.24.6 +Version: 1.25.0 Release: 1%{?dist} License: BSD-3-Clause Vendor: Microsoft Corporation @@ -160,6 +160,9 @@ fi %{_bindir}/* %changelog +* Wed Aug 13 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.25.0-1 +- Bump version to 1.25.0-1 + * Wed Aug 06 2025 bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com> - 1.24.6-1 - Bump version to 1.24.6-1 diff --git a/SPECS/jx/jx.spec b/SPECS/jx/jx.spec index fd935795b9b..7004c56d33b 100644 --- a/SPECS/jx/jx.spec +++ b/SPECS/jx/jx.spec @@ -1,7 +1,7 @@ Summary: Command line tool for working with Jenkins X. Name: jx Version: 3.10.182 -Release: 1%{?dist} +Release: 2%{?dist} License: Apache-2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -28,7 +28,7 @@ Source0: https://github.com/jenkins-x/jx/archive/v%{version}.tar.gz#/%{na # - For the value of "--mtime" use the date "2021-04-26 00:00Z" to simplify future updates. Source1: %{name}-%{version}-vendor.tar.gz -BuildRequires: golang >= 1.17.1 +BuildRequires: golang < 1.25 %global debug_package %{nil} %define our_gopath %{_topdir}/.gopath @@ -62,6 +62,9 @@ install -p -m 755 -t %{buildroot}%{_bindir} ./build/jx %{_bindir}/jx %changelog +* Sun Aug 31 2025 Andrew Phelps - 3.10.182-2 +- Set BR for golang to < 1.25 + * Thu Feb 13 2025 CBL-Mariner Servicing Account - 3.10.182-1 - Auto-upgrade to 3.10.182 - Fix CVE-2023-39325 and CVE-2023-44487 in jx diff --git a/SPECS/kubernetes/kubernetes.spec b/SPECS/kubernetes/kubernetes.spec index 5809db96884..e190b18a11c 100644 --- a/SPECS/kubernetes/kubernetes.spec +++ b/SPECS/kubernetes/kubernetes.spec @@ -10,7 +10,7 @@ Summary: Microsoft Kubernetes Name: kubernetes Version: 1.30.10 -Release: 10%{?dist} +Release: 11%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -29,7 +29,7 @@ Patch7: CVE-2025-22872.patch Patch8: CVE-2025-4563.patch BuildRequires: flex-devel BuildRequires: glibc-static >= 2.38-12%{?dist} -BuildRequires: golang +BuildRequires: golang < 1.25 BuildRequires: rsync BuildRequires: systemd-devel BuildRequires: which @@ -278,6 +278,9 @@ fi %{_exec_prefix}/local/bin/pause %changelog +* Sun Aug 31 2025 Andrew Phelps - 1.30.10-11 +- Set BR for golang to < 1.25 + * Mon Aug 25 2025 Andrew Phelps - 1.30.10-10 - Bump to rebuild with updated glibc diff --git a/SPECS/multus/multus.spec b/SPECS/multus/multus.spec index 2010cceb032..258afbe3895 100644 --- a/SPECS/multus/multus.spec +++ b/SPECS/multus/multus.spec @@ -19,7 +19,7 @@ Summary: CNI plugin providing multiple interfaces in containers Name: multus Version: 4.0.2 -Release: 5%{?dist} +Release: 6%{?dist} License: ASL 2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -33,7 +33,7 @@ Patch2: CVE-2023-45288.patch Patch3: CVE-2024-45338.patch # CVE-2025-22872 will be fixed in go net v0.38 by https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9 Patch4: CVE-2025-22872.patch -BuildRequires: golang +BuildRequires: golang < 1.25 BuildRequires: golang-packaging %description @@ -75,6 +75,9 @@ install -D -m0644 deployments/multus-daemonset-crio.yml %{buildroot}%{_datadir}/ %{_datarootdir}/k8s-yaml/multus/multus.yaml %changelog +* Sun Aug 31 2025 Andrew Phelps - 4.0.2-6 +- Set BR for golang to < 1.25 + * Fri Apr 25 2025 Kevin Lockwood - 4.0.2-5 - Add patch for CVE-2025-22872 diff --git a/SPECS/prometheus-adapter/prometheus-adapter.spec b/SPECS/prometheus-adapter/prometheus-adapter.spec index 771a39e0183..91cb2c787c3 100644 --- a/SPECS/prometheus-adapter/prometheus-adapter.spec +++ b/SPECS/prometheus-adapter/prometheus-adapter.spec @@ -1,7 +1,7 @@ Summary: Kubernetes Custom, Resource, and External Metric APIs implemented to work with Prometheus. Name: prometheus-adapter Version: 0.12.0 -Release: 3%{?dist} +Release: 4%{?dist} License: Apache-2.0 Vendor: Microsoft Corporation Distribution: Azure Linux @@ -9,7 +9,7 @@ URL: https://github.com/kubernetes-sigs/prometheus-adapter Source0: https://github.com/kubernetes-sigs/%{name}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz Patch0: CVE-2024-45338.patch Patch1: CVE-2025-22872.patch -BuildRequires: golang +BuildRequires: golang < 1.25 %description Implementation of Prometheus via Kubernetes Custom, Resource, and External Metric API. @@ -43,6 +43,9 @@ make test %doc README.md RELEASE.md %changelog +* Sun Aug 31 2025 Andrew Phelps - 0.12.0-4 +- Set BR for golang to < 1.25 + * Tue Apr 22 2025 Archana Shettigar - 0.12.0-3 - Patch CVE-2025-22872 diff --git a/SPECS/prometheus-process-exporter/prometheus-process-exporter.spec b/SPECS/prometheus-process-exporter/prometheus-process-exporter.spec index 1cace212777..ef27973c737 100644 --- a/SPECS/prometheus-process-exporter/prometheus-process-exporter.spec +++ b/SPECS/prometheus-process-exporter/prometheus-process-exporter.spec @@ -5,7 +5,7 @@ Summary: Prometheus exporter exposing process metrics from procfs Name: prometheus-process-exporter Version: 0.8.2 -Release: 2%{?dist} +Release: 3%{?dist} License: MIT Vendor: Microsoft Corporation Distribution: Azure Linux @@ -32,7 +32,7 @@ Patch0: 01-fix-RSS-test-on-non4K-pagesize-systems.patch Patch1: 03-disable-fakescraper.patch Patch2: CVE-2025-22870.patch -BuildRequires: golang +BuildRequires: golang < 1.25 BuildRequires: systemd-rpm-macros Requires(pre): shadow-utils @@ -95,6 +95,9 @@ getent passwd 'prometheus' >/dev/null || useradd -r -g 'prometheus' -d '%{_share %dir %attr(0755,prometheus,prometheus) %{_sharedstatedir}/prometheus %changelog +* Sun Aug 31 2025 Andrew Phelps - 0.8.2-3 +- Set BR for golang to < 1.25 + * Tue Apr 08 2025 Rohit Rawat - 0.8.2-2 - Patch CVE-2025-22870 diff --git a/cgmanifest.json b/cgmanifest.json index 5a648b56cec..0cb36ee4b59 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -4685,6 +4685,16 @@ } } }, + { + "component": { + "type": "other", + "other": { + "name": "golang", + "version": "1.25.0", + "downloadUrl": "https://github.com/microsoft/go/releases/download/v1.25.0-1/go1.25.0-20250812.10.src.tar.gz" + } + } + }, { "component": { "type": "other",