Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update fedora latest for CVE-2017-5461 #2876

Merged
merged 1 commit into from
Apr 21, 2017

Conversation

maxamillion
Copy link
Contributor

Signed-off-by: Adam Miller maxamillion@fedoraproject.org

Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
@tianon
Copy link
Member

tianon commented Apr 21, 2017

Diff:

diff --git a/fedora_25/Dockerfile b/fedora_25/Dockerfile
index c524c6c..593a736 100644
--- a/fedora_25/Dockerfile
+++ b/fedora_25/Dockerfile
@@ -3,4 +3,4 @@ MAINTAINER \
 [Adam Miller <maxamillion@fedoraproject.org>] \
 [Patrick Uiterwijk <patrick@puiterwijk.org>]
 ENV DISTTAG=f25docker FGC=f25 FBR=f25
-ADD fedora-25-20170329.tar.xz /
+ADD fedora-25-20170420.tar.xz /
diff --git a/fedora_25/fedora-25-20170329.tar.xz b/fedora_25/fedora-25-20170420.tar.xz
similarity index 76%
rename from fedora_25/fedora-25-20170329.tar.xz
rename to fedora_25/fedora-25-20170420.tar.xz
index b5316ca..3d3f8ac 100644
Binary files a/fedora_25/fedora-25-20170329.tar.xz and b/fedora_25/fedora-25-20170420.tar.xz differ
diff --git a/fedora_25/fedora-25-20170329.tar.xz  'tar -t' b/fedora_25/fedora-25-20170420.tar.xz  'tar -t'
similarity index 99%
rename from fedora_25/fedora-25-20170329.tar.xz  'tar -t'
rename to fedora_25/fedora-25-20170420.tar.xz  'tar -t'
index cab6f2a..154e038 100644
--- a/fedora_25/fedora-25-20170329.tar.xz  'tar -t'	
+++ b/fedora_25/fedora-25-20170420.tar.xz  'tar -t'	
@@ -33,6 +33,7 @@
 ./etc/csh.login
 ./etc/dbus-1/
 ./etc/dbus-1/session.conf
+./etc/dbus-1/session.d/
 ./etc/dbus-1/system.conf
 ./etc/dbus-1/system.d/
 ./etc/dbus-1/system.d/org.freedesktop.hostname1.conf
@@ -486,8 +487,8 @@
 ./tmp/anaconda-post.log
 ./tmp/.font-unix/
 ./tmp/.ICE-unix/
-./tmp/ks-script-9z0p8o6a
-./tmp/ks-script-p2_7j_fu
+./tmp/ks-script-64xpp1a9
+./tmp/ks-script-sw0bp7j4
 ./tmp/.Test-unix/
 ./tmp/.X11-unix/
 ./tmp/.XIM-unix/
@@ -1301,7 +1302,7 @@
 ./usr/lib64/libgmp.so.10
 ./usr/lib64/libgmp.so.10.3.1
 ./usr/lib64/libgnutls.so.30
-./usr/lib64/libgnutls.so.30.14.1
+./usr/lib64/libgnutls.so.30.14.2
 ./usr/lib64/libgobject-2.0.so.0
 ./usr/lib64/libgobject-2.0.so.0.5000.3
 ./usr/lib64/libgpg-error.so.0
@@ -1320,7 +1321,7 @@
 ./usr/lib64/libhogweed.so.4
 ./usr/lib64/libhogweed.so.4.3
 ./usr/lib64/libidn2.so.0
-./usr/lib64/libidn2.so.0.1.4
+./usr/lib64/libidn2.so.0.3.0
 ./usr/lib64/libidn.so.11
 ./usr/lib64/libidn.so.11.6.16
 ./usr/lib64/libip4tc.so.0
@@ -1519,7 +1520,7 @@
 ./usr/lib64/libxkbcommon.so.0
 ./usr/lib64/libxkbcommon.so.0.0.0
 ./usr/lib64/libxml2.so.2
-./usr/lib64/libxml2.so.2.9.3
+./usr/lib64/libxml2.so.2.9.4
 ./usr/lib64/libxtables.so.11
 ./usr/lib64/libxtables.so.11.0.0
 ./usr/lib64/libz.so.1
@@ -8116,6 +8117,9 @@
 ./usr/share/licenses/libidn/
 ./usr/share/licenses/libidn2/
 ./usr/share/licenses/libidn2/COPYING
+./usr/share/licenses/libidn2/COPYING.LESSERv3
+./usr/share/licenses/libidn2/COPYING.unicode
+./usr/share/licenses/libidn2/COPYINGv2
 ./usr/share/licenses/libidn/COPYING
 ./usr/share/licenses/libidn/COPYING.LESSERv2
 ./usr/share/licenses/libidn/COPYING.LESSERv3
@@ -9107,9 +9111,7 @@
 ./usr/share/pki/ca-trust-source/
 ./usr/share/pki/ca-trust-source/anchors/
 ./usr/share/pki/ca-trust-source/blacklist/
-./usr/share/pki/ca-trust-source/ca-bundle.neutral-trust.crt
-./usr/share/pki/ca-trust-source/ca-bundle.supplement.p11-kit
-./usr/share/pki/ca-trust-source/ca-bundle.trust.crt
+./usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit
 ./usr/share/pki/ca-trust-source/README
 ./usr/share/polkit-1/
 ./usr/share/polkit-1/actions/

@tianon
Copy link
Member

tianon commented Apr 21, 2017

LGTM

Build test of #2876; 03e77b3 (fedora):

$ bashbrew build fedora:latest
Building bashbrew/cache:422b1eb2192286a63d0c72568c8c7ae92940ea289c0834fd36251a5811682a13 (fedora:latest)
Tagging fedora:latest
Tagging fedora:25

$ test/run.sh fedora:latest
testing fedora:latest
	'utc' [1/4]...passed
	'cve-2014--shellshock' [2/4]...passed
	'no-hard-coded-passwords' [3/4]...passed
	'override-cmd' [4/4]...passed


$ bashbrew build fedora:24
Using bashbrew/cache:822cacba5486d0e6269c396be60d614bb4b6496d0c4a1f893d33ee0f328c2c94 (fedora:24)
Tagging fedora:24

$ test/run.sh fedora:24
testing fedora:24
	'utc' [1/4]...passed
	'cve-2014--shellshock' [2/4]...passed
	'no-hard-coded-passwords' [3/4]...passed
	'override-cmd' [4/4]...passed


$ bashbrew build fedora:rawhide
Using bashbrew/cache:4bb1e34ed2498d46d72445fe5751f1d8da81d234ff48edd507d4c40a2b49ef3d (fedora:rawhide)
Tagging fedora:rawhide

$ test/run.sh fedora:rawhide
testing fedora:rawhide
	'utc' [1/4]...passed
	'cve-2014--shellshock' [2/4]...passed
	'no-hard-coded-passwords' [3/4]...passed
	'override-cmd' [4/4]...passed

@tianon tianon merged commit f5ff6f7 into docker-library:master Apr 21, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants