Skip to content

Commit 3062cc7

Browse files
committed
Bump Rocky 8 snapshots
This brings in the CPU vulnerability fixes for: - Zenbleed - Downfall
1 parent 9ed844e commit 3062cc7

File tree

3 files changed

+15
-3
lines changed

3 files changed

+15
-3
lines changed

etc/kayobe/pulp-repo-versions.yml

+6-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ stackhpc_pulp_repo_elasticsearch_logstash_kibana_7_x_version: 20230727T144020
2222
stackhpc_pulp_repo_epel_9_version: 20230302T031902
2323
stackhpc_pulp_repo_elrepo_9_version: 20230907T075311
2424
stackhpc_pulp_repo_epel_modular_version: 20220913T043117
25-
stackhpc_pulp_repo_epel_version: 20230206T150339
25+
stackhpc_pulp_repo_epel_version: 20230929T005202
2626
stackhpc_pulp_repo_grafana_version: 20230903T003752
2727
stackhpc_pulp_repo_mariadb_10_6_centos8_version: 20230815T010124
2828
stackhpc_pulp_repo_mlnx_ofed_5_7_1_0_2_0_rhel8_6_version: 20220920T151419
@@ -41,6 +41,11 @@ stackhpc_pulp_repo_rocky_8_7_baseos_version: 20221202T032715
4141
stackhpc_pulp_repo_rocky_8_7_extras_version: 20221201T192704
4242
stackhpc_pulp_repo_rocky_8_7_nfv_version: 20221202T032715
4343
stackhpc_pulp_repo_rocky_8_7_powertools_version: 20221202T032715
44+
stackhpc_pulp_repo_rocky_8_8_appstream_version: 20230928T024829
45+
stackhpc_pulp_repo_rocky_8_8_baseos_version: 20230928T024829
46+
stackhpc_pulp_repo_rocky_8_8_extras_version: 20230928T024829
47+
stackhpc_pulp_repo_rocky_8_8_nfv_version: 20230922T023520
48+
stackhpc_pulp_repo_rocky_8_8_powertools_version: 20230928T024829
4449
stackhpc_pulp_repo_rocky_9_1_appstream_version: 20230228T044432
4550
stackhpc_pulp_repo_rocky_9_1_baseos_version: 20230228T044432
4651
stackhpc_pulp_repo_rocky_9_1_crb_version: 20230228T044432

etc/kayobe/pulp.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -217,8 +217,8 @@ stackhpc_pulp_sync_centos_stream8: "{{ os_distribution == 'centos' }}"
217217

218218
# Whether to sync Rocky Linux 8 packages.
219219
stackhpc_pulp_sync_rocky_8: "{{ os_distribution == 'rocky' and os_release == '8' }}"
220-
# Rocky 8 minor version number. Supported values: 6, 7
221-
stackhpc_pulp_repo_rocky_8_minor_version: 7
220+
# Rocky 8 minor version number. Supported values: 6, 7, 8
221+
stackhpc_pulp_repo_rocky_8_minor_version: 8
222222
# Rocky 8 Snapshot versions. The defaults use the appropriate version from
223223
# pulp-repo-versions.yml for the selected minor release.
224224
stackhpc_pulp_repo_rocky_8_appstream_version: "{{ lookup('vars', 'stackhpc_pulp_repo_rocky_8_%s_appstream_version' % stackhpc_pulp_repo_rocky_8_minor_version) }}"
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
security:
3+
- |
4+
The Rocky 8 minor version has been bumped to 8.8 and new snapshots have
5+
been created to include fixes for Zenbleed (CVE-2023-20593), Downfall
6+
(CVE-2022-40982). It is recommended that you update your OS packages and
7+
reboot into the kernel as soon as possible.

0 commit comments

Comments
 (0)