microsoft/CBL-Mariner issues and pull requests

#6240 - Upgrade python-ldap 3.3.1 -> 3.4.0 to address CVE-2021-46823

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6239 - Address CVE-2023-29383 in shadow-utils

Pull Request - State: closed - Opened by kanikanema about 1 year ago
Labels: security, main

#6238 - toolkit: fix `command -v` invocation

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: main

#6237 - Revert "Added a toolkit check for required tooling. (#6199)"

Pull Request - State: closed - Opened by mfrw about 1 year ago - 4 comments
Labels: main

#6236 - Fix systemd/systemd-bootstrap confusion by adding explicit requires

Pull Request - State: closed - Opened by jslobodzian about 1 year ago - 1 comment
Labels: main

#6235 - Remove unnecessary/incorrect serial getty service enabling in marketplace images

Pull Request - State: closed - Opened by ddstreetmicrosoft about 1 year ago - 1 comment
Labels: main

#6234 - Add files into azure marketplace image to make chronyd.service require /dev/ptp_hyperv before starting

Pull Request - State: closed - Opened by ddstreetmicrosoft about 1 year ago
Labels: security, main

#6233 - chronyd.conf in azure images uses PTP device which may not be present (yet)

Issue - State: closed - Opened by ddstreet about 1 year ago

#6232 - upgrade taglib 1.11.1 to 1.13.1 to address 2 CVEs

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6231 - re2c: upgrade to version 2.0 to fix CVE-2018-21232

Pull Request - State: closed - Opened by anphel31 about 1 year ago
Labels: security, main, specs-extended

#6230 - Add gdal package to specs-extended

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: main

#6229 - containerized-rpmbuild: use folder definitions from Makefile

Pull Request - State: closed - Opened by neha170 about 1 year ago
Labels: Tools, main, DevEx

#6228 - Support repofiles in precacher tool

Pull Request - State: closed - Opened by dmcilvaney about 1 year ago - 2 comments
Labels: Tools, main

#6227 - containerized-rpmbuild: add arch to welcome txt

Pull Request - State: closed - Opened by neha170 about 1 year ago
Labels: main

#6226 - Upgrade exiv2 0.27.5 -> 0.28.0

Pull Request - State: closed - Opened by mfrw about 1 year ago - 2 comments
Labels: security, main, specs-extended

#6225 - libguestfs: remove toolchain package requirements to fix build break

Pull Request - State: closed - Opened by anphel31 about 1 year ago - 1 comment
Labels: main

#6224 - TEST, PLEASE IGNORE

Pull Request - State: closed - Opened by PawelWMS about 1 year ago

#6223 - Updated usage of `pip` in the package build template.

Pull Request - State: closed - Opened by PawelWMS about 1 year ago
Labels: main

#6222 - Resolve mutt CVE-2023-4874

Pull Request - State: closed - Opened by henryli001 about 1 year ago
Labels: security, main

#6221 - Namespace httpd include files into its own directory

Pull Request - State: open - Opened by AZaugg about 1 year ago - 3 comments
Labels: main

#6220 - Nopatch kernel to fix CVE-2023-4208, CVE-2023-4622

Pull Request - State: closed - Opened by BettyRain about 1 year ago
Labels: security, main

#6219 - Add cpupower systemd unit file

Pull Request - State: open - Opened by AZaugg about 1 year ago
Labels: main

#6218 - Patch CVE-2023-41910 in lldpd package (#6205 cherry-pick)

Pull Request - State: closed - Opened by PawelWMS about 1 year ago - 1 comment
Labels: security

#6217 - Removed 'exit 1' from 'supermin'.

Pull Request - State: closed - Opened by PawelWMS about 1 year ago
Labels: main

#6216 - Add a fallback lazy mode to chroot unmount

Pull Request - State: closed - Opened by dmcilvaney about 1 year ago
Labels: main

#6215 - Upgrade imaptest 20210305 to 20210511

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: main

#6214 - Patch libssh2 to address CVE-2020-22218

Pull Request - State: closed - Opened by suresh-thelkar about 1 year ago - 4 comments
Labels: security, main

#6213 - gcc: add patch for CVE-2023-4039

Pull Request - State: closed - Opened by anphel31 about 1 year ago
Labels: security, main

#6212 - Config changes for running Mariner as guest VM on MSHV/CH Dom0

Pull Request - State: closed - Opened by ameyapu about 1 year ago

#6211 - [AUTOPATCHER-CORE] Patched libssh2 to address CVE-2020-22218

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago - 1 comment
Labels: security, Automatic PR, main, AutoUpgrade Core

#6210 - Resolve vim CVE-2023-4738, CVE-2023-4750, CVE-2023-4781, CVE-2023-4752 and CVE-2023-4733

Pull Request - State: closed - Opened by henryli001 about 1 year ago
Labels: security, main

#6209 - [AUTOPATCHER-kernel] Kernel upgrade to version 5.15.131.1 - branch nicogbg/Kernel-Upgrade-Test

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: Automatic PR, AutoUpgrade Kernel

#6208 - Resolve lldpd CVE-2023-41910

Pull Request - State: closed - Opened by henryli001 about 1 year ago - 1 comment
Labels: security, main

#6207 - mariner toolkit incorrectly creates serial-getty@ttyS0 service

Issue - State: closed - Opened by ddstreetmicrosoft about 1 year ago

#6206 - [AUTOPATCHER-kernel] Kernel CVE - branch main - CVE-2023-4207 CVE-2023-4015 CVE-2023-4206

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: security, Automatic PR, main, AutoUpgrade Kernel

#6205 - Patch CVE-2023-41910 in lldpd package

Pull Request - State: closed - Opened by suresh-thelkar about 1 year ago - 1 comment
Labels: security, main

#6204 - [AUTOPATCHER-kernel] Kernel upgrade to version 5.15.131.1 - branch nicogbg/Kernel-Upgrade-Test

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: AutoUpgrade Kernel

#6203 - [AUTOPATCHER-CORE] Upgrade redis to 6.2.13 fix CVE-2022-24834

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: security, Automatic PR, main, AutoUpgrade Core

#6202 - [TEST-AUTOUPGRADE] - DO NOT MERGE

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: Automatic PR, main, AutoUpgrade Test

#6201 - [AUTOPATCHER-kernel] Kernel upgrade to version 5.10.194.1 - branch 1.0-dev

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago - 1 comment
Labels: Automatic PR, 1.0-dev, AutoUpgrade Kernel

#6200 - Add `help` target to toolkit Makefile

Pull Request - State: closed - Opened by reubeno about 1 year ago - 7 comments
Labels: main

#6199 - Added a toolkit check for required tooling.

Pull Request - State: closed - Opened by PawelWMS about 1 year ago
Labels: main

#6198 - Upgrade rust to 1.72.0 to resolve CVE-2023-38497, CVE-2023-40030

Pull Request - State: closed - Opened by dmcilvaney about 1 year ago - 7 comments
Labels: security, main

#6197 - [AUTOPATCHER-kernel] Kernel upgrade to version 5.10.194.1 - branch 1.0-dev

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: Automatic PR, 1.0-dev, AutoUpgrade Kernel

#6196 - [AUTOPATCHER-kernel] Kernel upgrade to version 5.15.131.1 - branch main

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago - 1 comment
Labels: Automatic PR, main, AutoUpgrade Kernel

#6195 - Bump the bind version to 9.16.37 to fix CVE-2022-3924, CVE-2022-3094, CVE-2022-3736

Pull Request - State: closed - Opened by BettyRain about 1 year ago
Labels: security, main

#6194 - patch tcl for CVE-2023-36328

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6193 - patch libtommath for CVE-2023-36328

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6192 - fix docker command

Pull Request - State: closed - Opened by neha170 about 1 year ago
Labels: main, DevEx

#6191 - Apply fixes to vim for CVE-2023-4734 CVE-2023-4735 CVE-2023-4736

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6190 - Apply fixes to vim for CVE-2023-4734 CVE-2023-4735 CVE-2023-4736

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security

#6189 - bump frr to 8.5.3 for CVE-2023-41358 CVE-2023-41359 CVE-2023-41360

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6188 - Update welcome text

Pull Request - State: closed - Opened by neha170 about 1 year ago
Labels: main, DevEx

#6187 - Upgrade wireshark 3.4.16 -> 4.0.8 to address 27 CVEs

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: security, main, specs-extended

#6186 - Address nodejs CVEs 32002 32006 32559

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6185 - Fix nodejs for CVE-2023-32002 CVE-2023-32006 CVE-2023-32559

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security

#6184 - Patch etcd to fix CVE-2022-34038

Pull Request - State: closed - Opened by BettyRain about 1 year ago - 1 comment
Labels: security, main

#6183 - Switched the PR check pipeline to grab agent pools from a shared group.

Pull Request - State: closed - Opened by PawelWMS about 1 year ago
Labels: main

#6182 - cmake patch for CVE-2023-35495

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6181 - Fix `librelp` tests by adding `glibc-debuginfo`

Pull Request - State: closed - Opened by osamaesmailmsft about 1 year ago
Labels: main

#6180 - nodejs: CVE-2023-35945

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main

#6179 - Upgrade wavpack: 5.4.0 -> 5.6.0 to address CVE-2021-44269 & CVE-2022-2476

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6178 - Upgrade fapolicyd 1.0.2 -> 1.3.2 to address CVE-2022-1117

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6177 - Upgrade advancecomp 2.4 -> 2.5 to address CVE-2023-2961

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6176 - Sindhu/binutils CVE fixes with backport patches

Pull Request - State: open - Opened by sindhu-karri about 1 year ago
Labels: security, main

#6175 - Made `PipAuthenticate` artifact feeds optional for package test analysis.

Pull Request - State: closed - Opened by PawelWMS about 1 year ago
Labels: main

#6174 - User/bfjelds/buildah CVE 2022 2990

Pull Request - State: closed - Opened by bfjelds about 1 year ago
Labels: security, main, specs-extended

#6173 - create SOURCES_DIR

Pull Request - State: closed - Opened by neha170 about 1 year ago
Labels: main, DevEx

#6172 - createrepo in all repos defined in local.repo

Pull Request - State: closed - Opened by neha170 about 1 year ago
Labels: Tools, main, DevEx

#6171 - Fixing python-more-itertools tests

Pull Request - State: closed - Opened by osamaesmailmsft about 1 year ago
Labels: main

#6170 - Upgrade usbguard 1.0.0->1.1.0 to address CVE-2019-25058

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6169 - Upgrade freeradius 3.0.21 -> 3.2.3 to address 2 CVEs

Pull Request - State: closed - Opened by arc9693 about 1 year ago - 1 comment
Labels: main

#6168 - DO NOT MERGE - Test for #6165

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: main

#6167 - Upgrade tang 7 -> 14 to address CVE-2023-1672

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: security, main, specs-extended

#6166 - how to install perl-URI-Encode on CBL Mariner

Issue - State: open - Opened by pramenku about 1 year ago - 9 comments

#6165 - workflows: bump version of actions/checkout 3 -> 4

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: main

#6164 - Upgrade flac 1.3.4 -> 1.4.3 to address CVE-2020-22219

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: security, main, specs-extended

#6163 - Upgrade opencryptoki 3.13.0 -> 3.17.0 to address CVE-2021-3798

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: security, main, specs-extended

#6162 - Add new package hping3 - 0.0.20051105

Pull Request - State: closed - Opened by porwalameet about 1 year ago
Labels: main, specs-extended

#6161 - Upgrade libmicrohttpd 0.9.71 -> 0.9.76 to address CVE-2023-27371

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: security, main, specs-extended

#6160 - Prepare September 2023 Update

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: Automatic PR, main, Release Bump

#6159 - Upgrade mod_auth_openidc 2.4.2.1 -> 2.4.14.2 to address CVE-2021-20718, CVE-2021-39191, CVE-2022-23527, CVE-2023-28625

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security, main, specs-extended

#6158 - Upgrade fetchmail 6.4.8 -> 6.4.22 to address CVE-2021-39272 & CVE-2021-36386

Pull Request - State: closed - Opened by mfrw about 1 year ago
Labels: security, main, specs-extended

#6157 - Adds libkml package to specs-extended

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: main, specs-extended

#6156 - Adds libkml package to specs-extended

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security

#6155 - Adds netcdf package to specs-extended

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: main, specs-extended

#6154 - Adds hdf package to specs-extended

Pull Request - State: closed - Opened by arc9693 about 1 year ago - 1 comment
Labels: main, specs-extended

#6153 - Adds gpsbabel package to specs-extended

Pull Request - State: closed - Opened by arc9693 about 1 year ago
Labels: security

#6152 - [AUTOPATCHER-EXTENDED] Upgrade mod_auth_openidc to 2.4.14.2 CVE-2021-20718, CVE-2021-39191, CVE-2022-23527, CVE-2023-28625

Pull Request - State: closed - Opened by CBL-Mariner-Bot about 1 year ago
Labels: Automatic PR, main, specs-extended, AutoUpgrade Extended

GitHub / microsoft/CBL-Mariner issues and pull requests