Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bumps binutils to latest #24

Closed

Conversation

stevenwilliamson
Copy link

Fixes many CVE's https://www.cvedetails.com/product/6825/GNU-Binutils.html?vendor_id=72

Would be grateful for a review/sanity check. For reference assuming this pull or similar can be made to upgrade trunk in time for Q4, I would also look to backport this upgrade to current LTS releases to fix the CVE's there.

taca added 30 commits September 18, 2017 01:03
## `3.9.1` (2017-09-08)

capistrano/capistrano@v3.9.0...v3.9.1

### Breaking changes:

* None

### Fixes:

* [#1912](capistrano/capistrano#1912): Fixed an issue where questions posed by `ask` were not printed on certain platforms - [@kminiatures](https://github.com/kminiatures)

## `3.9.0` (2017-07-28)

capistrano/capistrano@v3.8.2...v3.9.0

### Breaking changes:

* None

### New features:

* [#1911](capistrano/capistrano#1911): Add Capistrano::DSL#invoke! for repetitive tasks

### Fixes:

* [#1899](capistrano/capistrano#1899): Updated `deploy:cleanup` to continue rotating the releases and skip the invalid directory names instead of skipping the whole rotation of releases. The warning message has changed slightly due to the change of behavior.
0.12.2 (2017/08/04)

* Fixes race condition issue with rubygems.org


0.12.1 (2017/08/03)

* Fixes support for Oj < 3.3.3 (TritonDataCenter#163)
* Adds support for parser_options on MultiXML and SafeYAML parsers


0.12.0 (2017/07/28)

* Replace rash with rash_alt (TritonDataCenter#136)
* Allow write_options to be specified for FaradayMiddleware::Caching (TritonDataCenter#155)
* Add support for passing options to JSON.parse (TritonDataCenter#156)
* Parse YAML safely (TritonDataCenter#157)
* Handle responses with missing Location header (TritonDataCenter#159)
* Removes support for ruby < 1.9.3 (TritonDataCenter#162)
### 0.7.0 / 2017-09-11

* Add `ping` and `pong` to the set of events users can listen to
This is rubygem version of databases/ruby-mysql. Like ruby-mysql, this
package contains C extension, not pure ruby.
Update HOMEPAGE with "https" URL.
Add ruby-mysql 2.8.2 as ruby-mysql28 2.8.2 since 2.9 contains some
imconpatible change from 2.8.
Swich to use ruby-mysql28 instead of ruby-mysql.

Bump PKGREVISION.
Since none rubygems version of ruby-mysql contains C extension, there is
no merit to rubygems version of ruby-mysql-ext.
Better support for MySQL 5.7.

* avoid warning
* add collations and constants from MySQL 5.7.10
* support JSON type on MySQL 5.7
Fix depenency to avoid build problem.
Hard-coding hiera's version in gemspec.
13.4.0 (2017-09-11)

* Add Arch Linux support to package plugin #1042
* Detect LXC if LXC and Docker are on the same host #1055
* Add Azure metadata endpoint support #1033
* Move all requires into the plugin definitions #1045
* Improve detection of Windows EC2 nodes by using UUID information #1052
* Add error handling in Linux filesystem plugin #1047
* Properly handle uptimes over a year on AIX #1049
* Handle situations where /proc/cpuinfo lacks core data #1038
Proper changes are not available.
From CHANGELOG.md:

13.4.23 (2017-09-14)

Merged Pull Requests

* Use ruby 2.4.2 to addess multiple security vulnerabilities #6404 (thommay)
* Allow specifying default gateway on RHEL/Centos #6386 (tomdoherty)
* [MSYS-594] windows_task resource is not idempotent when specifying
  start_time and start_day #6312 (harikesh-kolekar)
* MSYS-656 - fixed dsc_script for WMF5 #6383 (piyushawasthi)


13.4.19 (2017-09-13)

Bug Fixes

* Ignore validation errors in Resource#to_text #6331 (coderanger)
* Auto import gpg keys in zypper_repository #6348 (tas50)
* Handle apple's git in the git resource #6359 (kzw)
* Launchd should not load launchagents as root. #6353 (mikedodge04)
* Pass json configuration to ShellSession class #6314 (btm)

Merged Pull Requests

* Add windows_path resource from the Windows cookbook #6295 (NimishaS)
* Bump Bundler version to 1.15.4 #6349 (jakauppila)
* dnf_provider: be more specific when we provide package #6351 (jaymzh)
* Speed up immutabilization #6355 (lamont-granquist)
* node attributes: remove useless dup in merge_all #6356 (lamont-granquist)
* Link to the knife docs in both places where we error on editor #6363 (tas50)
* Bump rubygems to 2.6.13 #6365 (lamont-granquist)
* Ship chef-vault in the omnibus package #6370 (thommay)
* Support an array of keys for apt_repository #6372 (gsreynolds)
* Immutablize properly as we deep merge #6362 (lamont-granquist)
* Alternate user local logon authentication for remote_file resource #5832
  (NimishaS)
* Add support for specifying ETHTOOL_OPTS in the ifconfig resource #6384
  (tomdoherty)
* Cleanup the current changelog #6387 (tas50)


13.3.42 (2017-08-16)

Merged Pull Requests

* Update Expeditor config to use new Merge and Artifact Actions #6287
  (tduffield)
* Apt: Add apt_preference resource from apt cookbooks #5529 (tas50)
* Fix typos #6298 (akitada)
* Set explicit page size for every search request #6299 (stevendanna)
* Add .dockerignore to reduce size of resulting images #6296 (tduffield)
* Fix git command in DCO sign-off example #6306 (edmorley)
* add option to enable unprivileged symlink creation on windows #6236
  (svmastersamurai)
* Bump omnibus-software version #6310 (thommay)
* throw readable errors if multiple dsc resources are found #6307 (Happycoil)
* Add zypper_repository resource #5948 (tas50)
* Pull in Ohai 13.3 #6319 (tas50)
* Maintain compat with old zypper_repo resource used in cookbooks #6318 (tas50)
* README improvement for Chef beginner. #6297 (takaya-fuj19)
* Bump InSpec to v1.33.1 #6324 (adamleff)


13.3.27 (2017-07-26)

* Added username/password validation for elevated option #6293 (NimishaS)
* Bump mixlib-shellout for #6271 #6285 (btm)
* Use new Expeditor config format #6272 (tduffield)
* Added :elevated option for powershell_script resource #6271 (NimishaS)
* Make mount idempotent on Aix #6213 (NAshwini)
* Allow windows_task create action to update tasks. #6193 (harikesh-kolekar)
* Use socketless local mode by default #6177 (coderanger)
* convert breakpoint resource to a custom resource #6176 (lamont-granquist)
* Make non-legacy solo use socketless mode #6174 (coderanger)
* Prefer Systemd with sysvinit script over Upstart for service provider #6157
  (shortdudey123)
13.1.0 (2017-07-17)

Merged pull requests:

* add the universe endpoint TritonDataCenter#269 (lamont-granquist)
* Update gemfile dependencies TritonDataCenter#267 (thommay)
* GET /[email protected] -- compare emails ignoring case TritonDataCenter#266 (srenatus)
* GET /[email protected] -- compare emails ignoring case TritonDataCenter#265 (srenatus)
* implement rfc090 for named nodes endpoint TritonDataCenter#264 (jeremymv2)
* Add skip-chef-zero-quirks to the defaults in chef-zero TritonDataCenter#263 (jaymalasinha)
* Add skip-chef-zero-quirks to the defaults in chef-zero TritonDataCenter#262 (jaymalasinha)
* Ensure that tests that use chef-zero git will work TritonDataCenter#259 (thommay)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.