Fixed CVE-2023-44487 in nginx and golang (#6381)

Co-authored-by: Dan Streetman <[email protected]>
Co-authored-by: Pawel Winogrodzki <[email protected]>

Author: 3 people

SPECS-EXTENDED/buildah/buildah.spec

@@ -21,7 +21,7 @@
 Summary:        A command line tool used for creating OCI Images
 Name:           buildah
 Version:        1.18.0
-Release:        18%{?dist}
+Release:        19%{?dist}
 License:        ASL 2.0
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -123,6 +123,9 @@ cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype
 %{_datadir}/%{name}/test
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 1.18.0-19
+- Bump release to rebuild with updated version of Go.
+
 * Tue Oct 03 2023 Mandeep Plaha <[email protected]> - 1.18.0-18
 - Bump release to rebuild against glibc 2.35-5
 

SPECS-EXTENDED/containernetworking-plugins/containernetworking-plugins.spec

@@ -24,7 +24,7 @@
 
 Name:          %{project}-%{repo}
 Version:       1.1.1
-Release:       11%{?dist}
+Release:       12%{?dist}
 Summary:       Libraries for writing CNI plugin
 License:       ASL 2.0 and BSD and MIT
 Vendor:        Microsoft Corporation
@@ -129,6 +129,9 @@ install -p plugins/ipam/dhcp/systemd/cni-dhcp.socket %{buildroot}%{_unitdir}
 %{_unitdir}/cni-dhcp.socket
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 1.1.1-12
+- Bump release to rebuild with updated version of Go.
+
 * Mon Aug 07 2023 CBL-Mariner Servicing Account <[email protected]> - 1.1.1-11
 - Bump release to rebuild with go 1.19.12
 

SPECS-EXTENDED/delve/delve.spec

@@ -2,7 +2,7 @@ Vendor:         Microsoft Corporation
 Distribution:   Mariner
 Name:                   delve
 Version:                1.5.0
-Release:                14%{?dist}
+Release:                15%{?dist}
 Summary:                A debugger for the Go programming language
 
 License:                MIT
@@ -72,6 +72,9 @@ done
 
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 1.5.0-15
+- Bump release to rebuild with updated version of Go.
+
 * Mon Aug 07 2023 CBL-Mariner Servicing Account <[email protected]> - 1.5.0-14
 - Bump release to rebuild with go 1.19.12
 

SPECS-EXTENDED/podman/podman.spec

@@ -36,7 +36,7 @@
 
 Name:           podman
 Version:        4.1.1
-Release:        15%{?dist}
+Release:        16%{?dist}
 License:        ASL 2.0 and BSD and ISC and MIT and MPLv2.0
 Summary:        Manage Pods, Containers and Container Images
 Vendor:         Microsoft Corporation
@@ -387,6 +387,9 @@ cp -pav test/system %{buildroot}/%{_datadir}/%{name}/test/
 
 # rhcontainerbot account currently managed by lsm5
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 4.1.1-16
+- Bump release to rebuild with updated version of Go.
+
 * Tue Oct 03 2023 Mandeep Plaha <[email protected]> - 4.1.1-15
 - Bump release to rebuild against glibc 2.35-5
 

SPECS-EXTENDED/umoci/umoci.spec

@@ -1,7 +1,7 @@
 Summary:        Open Container Image manipulation tool
 Name:           umoci
 Version:        0.4.7
-Release:        11%{?dist}
+Release:        12%{?dist}
 License:        Apache-2.0
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -39,6 +39,9 @@ go test -mod=vendor
 %{_bindir}/umoci
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 0.4.7-12
+- Bump release to rebuild with updated version of Go.
+
 * Mon Aug 07 2023 CBL-Mariner Servicing Account <[email protected]> - 0.4.7-11
 - Bump release to rebuild with go 1.19.12
 

SPECS/KeysInUse-OpenSSL/KeysInUse-OpenSSL.spec

@@ -1,7 +1,7 @@
 Summary:        The KeysInUse Engine for OpenSSL allows the logging of private key usage through OpenSSL
 Name:           KeysInUse-OpenSSL
 Version:        0.3.4
-Release:        1%{?dist}
+Release:        2%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -74,6 +74,9 @@ if [ -x %{_bindir}/keysinuseutil ]; then
 fi
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 0.3.4-2
+- Bump release to rebuild with updated version of Go.
+
 * Fri Sep 22 2023 Maxwell Moyer-McKee <[email protected]> - 0.3.4-1
 - Fix memory leak for high reload public keys
 

SPECS/application-gateway-kubernetes-ingress/application-gateway-kubernetes-ingress.spec

@@ -2,7 +2,7 @@
 Summary:        Application Gateway Ingress Controller
 Name:           application-gateway-kubernetes-ingress
 Version:        1.4.0
-Release:        14%{?dist}
+Release:        15%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -54,6 +54,9 @@ cp appgw-ingress %{buildroot}%{_bindir}/
 %{_bindir}/appgw-ingress
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 1.4.0-15
+- Bump release to rebuild with updated version of Go.
+
 * Mon Aug 07 2023 CBL-Mariner Servicing Account <[email protected]> - 1.4.0-14
 - Bump release to rebuild with go 1.19.12
 

SPECS/azcopy/azcopy.spec

@@ -1,7 +1,7 @@
 Summary:        The new Azure Storage data transfer utility - AzCopy v10
 Name:           azcopy
 Version:        10.15.0
-Release:        12%{?dist}
+Release:        13%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -61,6 +61,9 @@ go test -mod=vendor
 %{_bindir}/azcopy
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 10.15.0-13
+- Bump release to rebuild with updated version of Go.
+
 * Mon Aug 07 2023 CBL-Mariner Servicing Account <[email protected]> - 10.15.0-12
 - Bump release to rebuild with go 1.19.12
 

SPECS/blobfuse/blobfuse.spec

@@ -1,7 +1,7 @@
 Summary:        FUSE adapter - Azure Storage Blobs
 Name:           blobfuse
 Version:        1.4.5
-Release:        11%{?dist}
+Release:        12%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -46,6 +46,9 @@ install -p -m 755 build/blobfuse %{buildroot}%{_bindir}/
 %{_bindir}/blobfuse
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 1.4.5-12
+- Bump release to rebuild with updated version of Go.
+
 * Mon Aug 07 2023 CBL-Mariner Servicing Account <[email protected]> - 1.4.5-11
 - Bump release to rebuild with go 1.19.12
 

SPECS/blobfuse2/blobfuse2.spec

@@ -7,7 +7,7 @@
 Summary:        FUSE adapter - Azure Storage
 Name:           blobfuse2
 Version:        %{blobfuse2_version}
-Release:        1%{?dist}
+Release:        2%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -80,6 +80,9 @@ install -D -m 0644 ./setup/blobfuse2-logrotate %{buildroot}%{_sysconfdir}/logrot
 %{_sysconfdir}/logrotate.d/blobfuse2
 
 %changelog
+* Tue Oct 10 2023 Dan Streetman <[email protected]> - 2.1.0-2
+- Bump release to rebuild with updated version of Go.
+
 * Mon Sep 04 2023 Anubhuti Shruti <[email protected]> - 2.1.0-1
 - Bump version to 2.1.0