Commit graph

174 commits

Author SHA1 Message Date
Mikhail Novosyolov
e7fdc635e6 Fix CVE-2023-4813 and document fixes of other CVEs
Fix of CVE-2023-4813 was lost in d8ae03708b
2023-12-11 20:59:13 +03:00
Mikhail Novosyolov
894fcbf028 Fix CVE-2023-4806 2023-12-11 20:12:29 +03:00
Mikhail Novosyolov
c785123c5e chmod +x upd.sh 2023-12-04 03:04:33 +03:00
Mikhail Novosyolov
35bc25a4ab off racy tests 2023-12-03 15:24:15 +03:00
Mikhail Novosyolov
d8ae03708b use packaging scheme from rosa2023.1, include all fixes of CVEs, instead of manual backports 2023-12-01 21:17:35 +03:00
Aleksandr Proklov
d5c83abca7 up release 2023-10-27 13:29:57 +09:00
Aleksandr Proklov
22a0c25b89 fix CVE-2023-4813 2023-10-27 12:20:55 +09:00
Aleksandr Proklov
0fc0b17129 fix CVE-2023-4813 2023-10-27 12:04:29 +09:00
Aleksandr Proklov
82044c91c0 rediff patch 2023-10-27 11:44:40 +09:00
Aleksandr Proklov
5b5cd614bc fix CVE-2023-4527 2023-10-27 11:23:17 +09:00
Aleksandr Proklov
76f5d0980a fix CVE-2023-4527 2023-10-27 11:23:04 +09:00
survolog (Andrey Grigorev)
561f2f83f7 Fix CVE-2021-3998 CVE-2021-3999 CVE-2021-33574 CVE-2021-38604 CVE-2022-23218 CVE-2022-23219 2022-12-02 15:40:05 +03:00
slava86
b0f8be34b7 fix the autoconf version in aclocal.m4 2022-09-15 21:16:59 +03:00
Andrey Grigorev
90dad3a539 Add task-locales 2022-01-31 07:43:39 +00:00
Andrey Grigorev
c5f7e7f39a Fix unversioned obsoletes 2022-01-17 08:46:21 +00:00
Alexander Stefanov
e5396d970e go back to 2.33 2021-09-23 20:55:41 +00:00
Aleksandr Proklov
6238397b36 rebuild aarch64 patch 2021-09-17 15:57:18 +09:00
Andrey Grigorev
eaf4f8468b MassBuild#2340: Increase release tag 2021-08-11 12:00:38 +00:00
Aleksandr Proklov
68273e9176 up release 2021-04-16 09:24:40 +09:00
Aleksandr Proklov
7706dded45 fix CVE-2021-27645 2021-04-16 09:23:51 +09:00
Mikhail Novosyolov
13437af9e4 rm very old Obsoletes (do not pollute metadata with it) 2021-03-04 20:46:09 +03:00
Alexander Stefanov
ab819c53be enable locales 2021-02-05 09:37:20 +00:00
Alexander Stefanov
f937981d46 zdump in bindir 2021-02-05 07:40:32 +00:00
Alexander Stefanov
b7ee2b50e3 nss gone 2021-02-04 07:30:44 +00:00
Alexander Stefanov
fe3b449900 bootstrap 2021-02-03 14:39:10 +00:00
Alexander Stefanov
038ad2161f fix files 2021-02-03 12:45:17 +00:00
Alexander Stefanov
f8d34c712d add glibc-2.33-compile.patch 2021-02-03 10:33:13 +00:00
Alexander Stefanov
b2d51b04eb remove spinaphore.patch 2021-02-03 08:24:00 +00:00
Alexander Stefanov
560692b446 rediff patches 2021-02-03 07:56:11 +00:00
Alexander Stefanov
d1d0acfa7b upload sources 2021-02-03 07:42:08 +00:00
Alexander Stefanov
28369466d9 version autoupdate [2.33] 2021-02-02 13:00:01 +00:00
Mikhail Novosyolov
f9064bd1d4 Off nscd by default:
- caching of group and passwd does not make sense because sssd and winbind have their own caches, and NIS is not used nowadays
- caching to accelerate DNS resolution would be useful, but:
- systemd-resolved is used by default in rosa2019.1 and has its own cache
- but hosts cache is offed by default by eglibc-mandriva-nscd-no-host-cache.patch

So, nscd does not make sense. And causes troubles in different situations, e.g. in useradd --root <...> in Anaconda.
2020-12-04 15:05:03 +03:00
alexander stefanov
e2b997137f fix build 2020-11-29 17:56:49 +00:00
Mikhail Novosyolov
5d2028302b Low required kernel from 5.4 to 4.14
Support being a chroot on RHEL 8 (4.18), Ubuntu 18.04 (4.15) and LTS (4.14) kernel
For example, we have an aarch64 server with such kernel where it is problematic to upgrade it right now :(

Fixes: f1a767c "Support syscalls of kernel 5.4"
2020-11-29 13:22:53 +03:00
Mikhail Novosyolov
a5f91184d2 off crosscompilers due to missing cross-headers after I removed kernel-release, cross-compilers are probably not needed now 2020-11-29 01:39:03 +03:00
Mikhail Novosyolov
f1a767cc8f Support syscalls of kernel 5.4
I have looked at https://sourceware.org/git/?p=glibc.git;a=history;f=sysdeps/unix/sysv/linux/syscall-names.list;h=HEAD;hb=HEAD
and it seems that we do not support quite a lot of syscalls

We loose ability to run in chroots/containers on CentOS 8, but it is probably not a big problem for us right now
(ROSA is not a populer distro for contaienrs unfortunately)
and, I think, it is better to support newer syscalls than try to support strange hosts of containers.
We do not support RHEL 7 hosts now (they have kernel 3.10, but we require 4.0+).

Both rosa2019.1 and RHEL 9 with a newer kernel will be released soon

Discussed with and approved by fedya@.
He also said that older kernels are not required on aarch64.
2020-11-29 01:29:52 +03:00
Alexander Stefanov
9e7c4fad2f put generators back 2020-09-14 20:01:23 +00:00
Alexander Stefanov
645c59b3af 2.32 upgrade 2020-09-14 19:56:04 +00:00
Mikhail N
95eba39da1 devel() gen has been enabled on aarch64, sync 2020-09-09 20:50:47 +00:00
alexander stefanov
9eb0f34531 add filter 2020-09-09 09:55:33 +00:00
Alexander Stefanov
ed0218fbf6 target i686 2020-02-27 22:47:27 +00:00
Mikhail Novosyolov
97f40024d1 disable devel genarator in aarch64 2020-02-05 15:30:58 +03:00
Mikhail Novosyolov
e59e869b90 restore BR devel-rpm-generators 2020-02-05 13:18:42 +03:00
Mikhail Novosyolov
77cf3280cf Reenable exeplicit enablement of bitness detection in devel() generator 2020-02-05 13:08:27 +03:00
Alexander Stefanov
51cf41a66a no systemd-macros 2020-02-04 22:25:47 +00:00
Alexander Stefanov
ddb1a2ccd5 Merge branch 'rosa2019.1' of ssh://abf.rosalinux.ru/import/glibc into rosa2019.1 2020-02-04 22:21:40 +00:00
Alexander Stefanov
9f8be961e2 2.31 2020-02-04 22:21:36 +00:00
Mikhail Novosyolov
7a2f56e070 bump release 2020-02-04 23:38:15 +03:00
Alexander Stefanov
4a752613b5 distepoch is dead macro 2020-02-03 22:49:00 +00:00
Alexander Stefanov
366b2d46e8 cleanup 2020-02-01 12:54:43 +00:00