[3.0] update to 3.0.20251206-3.0

SPECS/.gitignore

@@ -106,6 +106,7 @@ compiler-rt
 conda
 conmon
 conntrack-tools
+containerized-data-importer
 coredns
 coreutils
 cpio
@@ -175,7 +176,6 @@ erofs-utils
 espeak-ng
 espeakup
 execstack
-expat
 expect
 expected
 extra-cmake-modules
@@ -224,6 +224,7 @@ giflib
 git
 glib
 glib-networking
+glibc
 glibmm
 glslang
 glusterfs
@@ -713,6 +714,7 @@ orangefs
 ostree
 p11-kit
 p7zip
+packer
 pam
 pam_krb5
 pam_wrapper
@@ -1235,6 +1237,7 @@ rubygem-webhdfs
 rubygem-webrick
 rubygem-yajl-ruby
 rubygem-zip-zip
+runc
 rust
 sanlock
 scons
@@ -1248,6 +1251,7 @@ sg3_utils
 sgabios
 sgml-common
 sgx-backwards-compatibility
+skopeo
 shared-mime-info
 sharutils
 shim
@@ -1273,7 +1277,6 @@ squid
 sscg
 sshpass
 strongswan
-stunnel
 subunit
 subversion
 sudo

SPECS/busybox/busybox.spec

@@ -1,7 +1,7 @@
 Summary:        Statically linked binary providing simplified versions of system commands
 Name:           busybox
 Version:        1.36.1
-Release:        15%{?dist}
+Release:        19%{?dist}
 License:        GPLv2
 Vendor:         Intel Corporation
 Distribution:   Edge Microvisor Toolkit
@@ -20,7 +20,7 @@ Patch6:         no-cbq.patch
 Patch7:         CVE-2023-39810.patch
 Patch8:         CVE-2022-48174.patch
 BuildRequires:  gcc
-BuildRequires:  glibc-static >= 2.38-12%{?dist}
+BuildRequires:  glibc-static >= 2.38-16%{?dist}
 BuildRequires:  libselinux-devel >= 1.27.7-2
 BuildRequires:  libsepol-devel
 %if 0%{?with_check}
@@ -107,6 +107,10 @@ SKIP_KNOWN_BUGS=1 ./runtest
 %{_mandir}/man1/busybox.petitboot.1.gz
 
 %changelog
+* Mon Jan 5 2025 Lee Chee Yang <chee.yang.lee@intel.com> - 1.36.1-19
+- merge from Azure Linux 3.0.20251206-3.0
+- Bump to rebuild with updated glibc
+
 * Fri Oct 3 2025 Lee Chee Yang <chee.yang.lee@intel.com> - 1.36.1-15
 - merge from Azure Linux 3.0.20250910-3.0
 - Patch CVE-2022-48174

SPECS/ca-certificates/ca-certificates.signatures.json

@@ -10,9 +10,9 @@
     "README.src": "86184318d451bec55d70c84e618cbfe10c8adb7dc893964ce4aaecff99d83433",
     "README.usr": "0d2e90b6cf575678cd9d4f409d92258ef0d676995d4d733acdb2425309a38ff8",
     "bundle2pem.sh": "a61e0d9f34e21456cfe175e9a682f56959240e66dfeb75bd2457226226aa413a",
-    "certdata.base.txt": "8896c309aef808c7769dc630abee75adbb6bfb5c8a961461b51f845a1740ea66",
+    "certdata.base.txt": "4bef2bd5e4f4693c424b92a4b9862d9fa8a62a654c998a4ca8c1e82bdcd62e99",
     "certdata.distrusted.txt": "536b1235c5b0b3c82ddf303eca696ec164cdb21899cd9e5313d8b29ce9cdc268",
-    "certdata.microsoft.txt": "9c802e9f5a0bd90ba51a4f04ec1d2304a11d1cf321e4e5bdff97459b46ba3e02",
+    "certdata.microsoft.txt": "38cd7da10bce27751cfee01b2fdaa55f52321cdf1a408ec658bbf591b64cc484",
     "certdata2pem.py": "4f5848c14210758f19ab9fdc9ffd83733303a48642a3d47c4d682f904fdc0f33",
     "pem2bundle.sh": "f96a2f0071fb80e30332c0bd95853183f2f49a3c98d5e9fc4716aeeb001e3426",
     "trust-fixes": "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b",

SPECS/ca-certificates/ca-certificates.spec

@@ -47,7 +47,7 @@ Name:           ca-certificates
 # When updating, "Epoch, "Version", AND "Release" tags must be updated in the "prebuilt-ca-certificates*" packages as well.
 Epoch:          1
 Version:        %{emt}.0.0
-Release:        11%{?dist}
+Release:        14%{?dist}
 License:        MPLv2.0
 Vendor:         Intel Corporation
 Distribution:   Edge Microvisor Toolkit
@@ -340,6 +340,12 @@ rm -f %{pkidir}/tls/certs/*.{0,pem}
 %{_bindir}/bundle2pem.sh
 
 %changelog
+* Fri Oct 3 2025 Lee Chee Yang <chee.yang.lee@intel.com> - 1:3.0.0-14
+- merge from Azure Linux 3.0.20251206-3.0
+- Adding 2 new base CAs: 'Microsoft TLS RSA Root G2' and 'Microsoft TLS ECC Root G2'.
+- Revert: Adding 2 new base CAs: 'Microsoft TLS RSA Root G2' and 'Microsoft TLS ECC Root G2'.
+- Updating Microsoft trusted root CAs.
+
 * Fri Oct 3 2025 Lee Chee Yang <chee.yang.lee@intel.com> - 1:3.0.0-11
 - merge from Azure Linux 3.0.20250910-3.0
 - Adding 2 new base CAs: 'Microsoft TLS RSA Root G2' and 'Microsoft TLS ECC Root G2'.