Merge pull request #1092 from microsoft/anphel/monthly-release-june-2021

June 2021 Monthly release

Author: anphel31

.github/workflows/check-entangled-specs.yml

@@ -5,16 +5,13 @@ name: Spec Entanglement Mismatch Check
 
 on:
   push:
-    paths:
-      - "**.spec"
     branches: [main, dev, 1.0*]
   pull_request:
-    paths:
-      - "**.spec"
     branches: [main, dev, 1.0*]
 
 jobs:
   check:
+    name: Spec Entanglement Mismatch Check
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/check-license-map.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
   check:
+    name: Spec License Map Check
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/check-package-cgmanifest.yml

@@ -9,7 +9,7 @@ on:
 jobs:
 
   build:
-    name: Validate Manifests
+    name: Check Package CGManifests
     runs-on: ubuntu-18.04
     steps:
 

.github/workflows/go-test-coverage.yml

@@ -1,4 +1,4 @@
-name: Go
+name: Go Test Coverage
 
 on:
   push:
@@ -9,7 +9,7 @@ on:
 jobs:
 
   build:
-    name: Build
+    name: Go Test Coverage
     runs-on: ubuntu-18.04
     steps:
 

.github/workflows/lint-specs.yml

@@ -12,6 +12,7 @@ on:
 
 jobs:
   spec-lint:
+    name: Spec Linting
     runs-on: ubuntu-latest
 
     steps:

SPECS-SIGNED/kernel-signed/kernel-signed.spec

@@ -10,7 +10,7 @@
 Summary:        Signed Linux Kernel for %{buildarch} systems
 Name:           kernel-signed-%{buildarch}
 Version:        5.10.42.1
-Release:        1%{?dist}
+Release:        3%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -146,6 +146,12 @@ ln -sf linux-%{uname_r}.cfg /boot/mariner.cfg
 %endif
 
 %changelog
+* Tue Jun 22 2021 Suresh Babu Chalamalasetty <[email protected]> - 5.10.42.1-3
+- Bump release number to match kernel release
+
+* Wed Jun 16 2021 Chris Co <[email protected]> - 5.10.42.1-2
+- Bump release number to match kernel release
+
 * Tue Jun 08 2021 Rachel Menge <[email protected]> - 5.10.42.1-1
 - Update source to 5.10.42.1
 

SPECS/LICENSES-AND-NOTICES/LICENSES-MAP.md

@@ -21,7 +21,9 @@
                 "byacc",
                 "calamares",
                 "catch",
+                "checkpolicy",
                 "chrony",
+                "collectd",
                 "conntrack-tools",
                 "cpprest",
                 "cryptsetup",
@@ -57,10 +59,12 @@
                 "libisofs",
                 "libkcapi",
                 "libpwquality",
+                "libsemanage",
                 "libstoragemgmt",
                 "libxcrypt",
                 "libzip",
                 "mailcap",
+                "mcstrans",
                 "mokutil",
                 "mozjs60",
                 "oath-toolkit",
@@ -69,6 +73,7 @@
                 "p7zip",
                 "p11-kit",
                 "perl-JSON",
+                "policycoreutils",
                 "pugixml",
                 "python-google-auth",
                 "python-jwt",
@@ -82,6 +87,10 @@
                 "qt5-qttools",
                 "qt5-rpm-macros",
                 "rdma-core",
+                "re2",
+                "secilc",
+                "selinux-policy",
+                "setools",
                 "sgml-common",
                 "sos",
                 "squashfs-tools",
@@ -90,6 +99,7 @@
                 "websocketpp",
                 "words",
                 "xmlstarlet",
+                "yajl",
                 "yaml-cpp",
                 "yasm",
                 "zipper"
@@ -155,6 +165,7 @@
                 "msgpack",
                 "nlohmann-json",
                 "nmap",
+                "node-problem-detector",
                 "ntopng",
                 "omi",
                 "pcaudiolib",
@@ -550,8 +561,7 @@
                 "nghttp2",
                 "nginx",
                 "ninja-build",
-                "nodejs-8.11.4",
-                "nodejs-9.11.2",
+                "nodejs",
                 "npth",
                 "nspr",
                 "nss",

SPECS/LICENSES-AND-NOTICES/data/licenses.json

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "ansible-2.9.12.tar.gz": "7e95ddf719190b068fafc7d7c7877c218054cc5da4f6d9d794faf7bc66dab774"
+  "ansible-2.9.18.tar.gz": "55fee77729eab2dce854c94a7b6998f0fcb7b9a053bdaa7eb4057f01a0d5d93c"
  }
 }

SPECS/ansible/ansible.signatures.json

@@ -1,7 +1,7 @@
 %{!?python2_sitelib: %global python2_sitelib %(python2 -c "from distutils.sysconfig import get_python_lib;print(get_python_lib())")}
 Summary:        Configuration-management, application deployment, cloud provisioning system
 Name:           ansible
-Version:        2.9.12
+Version:        2.9.18
 Release:        1%{?dist}
 License:        GPLv3+
 Vendor:         Microsoft Corporation
@@ -41,6 +41,9 @@ python2 setup.py test
 %{python2_sitelib}/*
 
 %changelog
+* Tue Jun 15 2021 Nicolas Ontiveros <[email protected]> - 2.9.18-1
+- Upgrade to version 2.9.18, which resolves CVE-2021-20191 and CVE-2021-20178
+
 * Wed Dec 30 2020 Nicolas Ontiveros <[email protected]> - 2.9.12-1
 - Upgrade to version 2.9.12, which resolves CVE-2020-10744
 

SPECS/ansible/ansible.spec

@@ -4,7 +4,7 @@
 Summary:        Kernel Audit Tool
 Name:           audit
 Version:        3.0
-Release:        6%{?dist}
+Release:        7%{?dist}
 Source0:        https://people.redhat.com/sgrubb/audit/%{name}-%{version}-alpha8.tar.gz
 Patch0:         refuse-manual-stop.patch
 License:        GPLv2+
@@ -173,6 +173,8 @@ make %{?_smp_mflags} check
 %{python3_sitelib}/*
 
 %changelog
+*   Tue Jun 08 2021 Henry Beberman <[email protected]> 3.0-7
+-   Increment release to force republishing using golang 1.15.13.
 *   Mon Apr 26 2021 Nicolas Guibourge <[email protected]> 3.0-6
 -   Increment release to force republishing using golang 1.15.11.
 *   Thu Dec 10 2020 Andrew Phelps <[email protected]> 3.0-5

SPECS/audit/audit.spec

@@ -1,7 +1,7 @@
 Summary:        FUSE adapter - Azure Storage Blobs
 Name:           blobfuse
 Version:        1.3.6
-Release:        2%{?dist}
+Release:        3%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -47,6 +47,8 @@ rm -rf %{buildroot}
 %{_bindir}/blobfuse
 
 %changelog
+* Tue Jun 08 2021 Henry Beberman <[email protected]> 1.3.6-3
+- Increment release to force republishing using golang 1.15.13.
 * Mon Apr 26 2021 Nicolas Guibourge <[email protected]> 1.3.6-2
 - Increment release to force republishing using golang 1.15.11.
 * Tue Feb 02 2021 Henry Beberman <[email protected]> 1.3.6-1

SPECS/blobfuse/blobfuse.spec

@@ -1,7 +1,10 @@
+#disable debuginfo because ceph-debuginfo rpm is too large
+%define debug_package %{nil}
+
 Summary:        User space components of the Ceph file system
 Name:           ceph
 Version:        16.2.0
-Release:        1%{?dist}
+Release:        2%{?dist}
 License:        LGPLv2 and LGPLv3 and CC-BY-SA and GPLv2 and Boost and BSD and MIT and Public Domain and GPLv3 and ASL-2.0
 URL:            https://ceph.io/
 Vendor:         Microsoft Corporation
@@ -54,10 +57,6 @@ Source0:        https://download.ceph.com/tarballs/%{name}-%{version}.tar.gz
 %define python3_sitearch %(python3 -c "from distutils.sysconfig import get_python_lib; import sys; sys.stdout.write(get_python_lib(1))")
 
 
-# disable dwz which compresses the debuginfo
-%global _find_debuginfo_dwz_opts %{nil}
-
-
 #################################################################################
 # Main package dependencies
 #################################################################################
@@ -1796,6 +1795,9 @@ exit 0
 %config %{_sysconfdir}/prometheus/ceph/ceph_default_alerts.yml
 
 %changelog
+*   Thu Jun 17 2021 Neha Agarwal <[email protected]> 16.2.0-2
+-   Disable debuginfo because ceph-debuginfo rpm is too large
+
 *   Fri May 21 2021 Neha Agarwal <[email protected]> 16.2.0-1
 -   Update package version to fix CVE-2020-25660, CVE-2020-25678 and CVE-2020-27781
 

SPECS/ceph/ceph.spec

@@ -0,0 +1,5 @@
+{
+ "Signatures": {
+  "checkpolicy-2.9.tar.gz": "a946c32b284532447857e4c48830f8816867c61220c8c08bdd32e6f691335f8e"
+ }
+}