Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dev-libs/openssl, sys-apps/shadow: Security updates #1037

Merged
merged 5 commits into from
Aug 2, 2023

Conversation

krnowak
Copy link
Member

@krnowak krnowak commented Aug 1, 2023

CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/2240/cldsv

Closes flatcar/Flatcar#1085
Closes flatcar/Flatcar#1122

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

krnowak and others added 5 commits August 1, 2023 14:50
It's from Gentoo commit 5ff6c1b3f21acc2ee6a95eda6ccda6baceedaf7d.
- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles
- continue shipping app-misc/c_rehash

Signed-off-by: Mathieu Tortuyaux <[email protected]>
Signed-off-by: Dongsu Park <[email protected]>
It's from Gentoo commit a6ec9c2a8a13f2dbd82e8768666356beea63f445.
- Carry over our custom tmpfiles and securetty files
- Remove /etc files and install them to /usr, use tmpfiles
- Switch /etc/login.defs edits to /usr/share/shadow/login.defs
- Drop moving passwd out of /usr since we don't have split-usr
- Drop pkg_postinst
@krnowak krnowak marked this pull request as ready for review August 1, 2023 16:59
@krnowak krnowak requested a review from a team August 1, 2023 16:59
@krnowak
Copy link
Member Author

krnowak commented Aug 1, 2023

CI passed.

@github-actions
Copy link

github-actions bot commented Aug 1, 2023

Build action triggered: https://github.com/flatcar/scripts/actions/runs/5729685012

@dongsupark dongsupark added the main label Aug 2, 2023
@krnowak krnowak merged commit 1f1a531 into main Aug 2, 2023
1 check failed
@krnowak krnowak deleted the krnowak/security-updates branch August 2, 2023 11:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

update: openssl update: shadow
4 participants