Skip to content

Commit c5f4ef7

Browse files
authored
Upgrade azcopy to 10.24.0 to fix multiple security issues (#9185)
1 parent cdb876a commit c5f4ef7

4 files changed

Lines changed: 10 additions & 150 deletions

File tree

SPECS/azcopy/CVE-2023-44487.patch

Lines changed: 0 additions & 142 deletions
This file was deleted.
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"Signatures": {
3-
"azure-storage-azcopy-10.15.0.tar.gz": "f850ee5f3d45d3769d9929a98abc3d2b997e90ad4fd6dc49a487b248e6e8d78c",
4-
"azure-storage-azcopy-10.15.0-vendor.tar.gz": "bf1719f4db07dc4b5102ecde72a85fa646fe85730a506d635cb3c4e49e8b162b"
3+
"azure-storage-azcopy-10.24.0-vendor.tar.gz": "b0b0436e8e8aa280007d2daf5cb1ea06346d54e070062042c792a9fbd110e690",
4+
"azure-storage-azcopy-10.24.0.tar.gz": "bbb09bee00207eb6e6e80a3ecf58ac39beb956c94f500b62888ed3404580430d"
55
}
66
}

SPECS/azcopy/azcopy.spec

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: The new Azure Storage data transfer utility - AzCopy v10
22
Name: azcopy
3-
Version: 10.15.0
4-
Release: 15%{?dist}
3+
Version: 10.24.0
4+
Release: 1%{?dist}
55
License: MIT
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -27,9 +27,8 @@ Source0: https://github.com/Azure/azure-storage-azcopy/archive/refs/tags/
2727
# See: https://reproducible-builds.org/docs/archives/
2828
# - For the value of "--mtime" use the date "2021-04-26 00:00Z" to simplify future updates.
2929
Source1: azure-storage-%{name}-%{version}-vendor.tar.gz
30-
Patch0: CVE-2023-44487.patch
3130

32-
BuildRequires: golang >= 1.17.9
31+
BuildRequires: golang >= 1.19
3332
BuildRequires: git
3433
%global debug_package %{nil}
3534
%define our_gopath %{_topdir}/.gopath
@@ -64,6 +63,9 @@ go test -mod=vendor
6463
%{_bindir}/azcopy
6564

6665
%changelog
66+
* Thu May 20 2024 Sudipta Pandit <sudpandit@microsoft.com> - 10.24.0-1
67+
- Bump version to address multiple security issues.
68+
6769
* Thu Feb 01 2024 Daniel McIlvaney <damcilva@microsoft.com> - 10.15.0-15
6870
- Address CVE-2023-44487 by patching vendored golang.org/x/net
6971

cgmanifest.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -855,8 +855,8 @@
855855
"type": "other",
856856
"other": {
857857
"name": "azcopy",
858-
"version": "10.15.0",
859-
"downloadUrl": "https://github.com/Azure/azure-storage-azcopy/archive/refs/tags/v10.15.0.tar.gz"
858+
"version": "10.24.0",
859+
"downloadUrl": "https://github.com/Azure/azure-storage-azcopy/archive/refs/tags/v10.24.0.tar.gz"
860860
}
861861
}
862862
},

0 commit comments

Comments
 (0)