[AUTOPATCHER-CORE] Upgrade influxdb and influx-cli to 2.7.5 to fix CVE-2023-44487 (#12276)

Co-authored-by: Sam Meluch <[email protected]>
Co-authored-by: corvus-callidus <[email protected]>
Co-authored-by: jslobodzian <[email protected]>
(cherry picked from commit baeab98)

Author: CBL-Mariner-Bot

SPECS/influx-cli/influx-cli.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
-      "influx-cli-2.7.3.tar.gz": "1be63bfdf39ee5e038c464b97994967183e9c6db05a3829172f0045b84e2b247",
-      "influx-cli-2.7.3-vendor.tar.gz": "8548981c0df5d6330c612ec9fd2aeaa8203aa2e86868087f9b9410dc1758d56b"
+    "influx-cli-2.7.5.tar.gz": "2741105c0fa7bf0f728643807aa21e9a8e356b17a681e92f06c4ff680e6944ac",
+    "influx-cli-2.7.5-vendor.tar.gz": "236129aa82f73b371007b161a2b33745245a9ccda2107fa986a3c17eabeadb7e"
   }
 }

SPECS/influx-cli/influx-cli.spec

@@ -17,8 +17,8 @@
 
 Summary:        CLI for managing resources in InfluxDB
 Name:           influx-cli
-Version:        2.7.3
-Release:        2%{?dist}
+Version:        2.7.5
+Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -81,6 +81,9 @@ bin/influx completion zsh > %{buildroot}/%{_datadir}/zsh/site-functions/_influx
 %{_datadir}/zsh
 
 %changelog
+* Tue Feb 11 2025 CBL-Mariner Servicing Account <[email protected]> - 2.7.5-1
+- Auto-upgrade to 2.7.5 - Update influx-cli to match influxdb version for CVE-2023-44487
+
 * Thu Mar 07 2024 Andrew Phelps <[email protected]> - 2.7.3-2
 - Remove restriction on golang BR version
 

SPECS/influxdb/influxdb.signatures.json

@@ -1,11 +1,11 @@
 {
-    "Signatures": {
-        "influxdb-2.7.3.tar.gz": "b1bc78feff1940774f3d017d292b9fd4187ce2041ceaf94fa5fa7ff7546d8944",
-        "influxdb-2.7.3-vendor.tar.gz": "d59a7652ffac6b108fd4815289dd65148bedaa747a932b9a52b76b1628ab9d4c",
-        "influxdb-2.7.3-static-data.tar.gz": "23e0f0503368bae46d41840934f3c907f3978cdbbc9a1f8f250e396b2d004842",
-        "config.yaml": "f0eb56d58d2685bdfc16ee73d835f022c2df6905458381a972375449fde6170c",
-        "influxdb.service": "570fdbb685c8468f3c4e75b7f482bbc5c0ab4382ad2259a595e7839244747645",
-        "influxdb-user.conf": "ca5a50bb6ca9f4fcb91d745d552e70af934fdad86196c535c4eb8699a20e7aa0",
-        "influxdb.tmpfiles": "2e1880f1d7675464b93984a635e770f6f8ac1777d21a607f7e4d9d1480776f68"
-    }
+  "Signatures": {
+    "influxdb-2.7.5-vendor.tar.gz": "190ddfeb625f24fc4791da536290cd15b919821666ae52a50d668536fc0f3cb8",
+    "influxdb-2.7.5-static-data.tar.gz": "23e0f0503368bae46d41840934f3c907f3978cdbbc9a1f8f250e396b2d004842",
+    "config.yaml": "f0eb56d58d2685bdfc16ee73d835f022c2df6905458381a972375449fde6170c",
+    "influxdb.service": "570fdbb685c8468f3c4e75b7f482bbc5c0ab4382ad2259a595e7839244747645",
+    "influxdb-user.conf": "ca5a50bb6ca9f4fcb91d745d552e70af934fdad86196c535c4eb8699a20e7aa0",
+    "influxdb.tmpfiles": "2e1880f1d7675464b93984a635e770f6f8ac1777d21a607f7e4d9d1480776f68",
+    "influxdb-2.7.5.tar.gz": "4850fd4de964034fe92ef3c12940107eaf04ab377760de66dc90bf40ca6b7c92"
+  }
 }

SPECS/influxdb/influxdb.spec

@@ -17,8 +17,8 @@
 
 Summary:        Scalable datastore for metrics, events, and real-time analytics
 Name:           influxdb
-Version:        2.7.3
-Release:        9%{?dist}
+Version:        2.7.5
+Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -151,6 +151,9 @@ go test ./...
 %{_tmpfilesdir}/influxdb.conf
 
 %changelog
+* Mon Feb 10 2025 CBL-Mariner Servicing Account <[email protected]> - 2.7.5-1
+- Auto-upgrade to 2.7.5 - Upgrade influxdb to fix CVE-2023-44487
+
 * Wed Jan 27 2025 Kavya Sree Kaitepalli <[email protected]> - 2.7.3-9
 - Fix CVE-2024-28180
 

cgmanifest.json

@@ -3409,8 +3409,8 @@
         "other": {
           "name": "exempi",
           "version": "2.6.5",
-          "downloadUrl": "https://gitlab.freedesktop.org/libopenraw/exempi/-/archive/2.6.5/exempi-2.6.5.tar.bz2"        
-	}
+          "downloadUrl": "https://gitlab.freedesktop.org/libopenraw/exempi/-/archive/2.6.5/exempi-2.6.5.tar.bz2"
+        }
       }
     },
     {
@@ -7251,8 +7251,8 @@
         "type": "other",
         "other": {
           "name": "influx-cli",
-          "version": "2.7.3",
-          "downloadUrl": "https://github.com/influxdata/influx-cli/archive/refs/tags/v2.7.3.tar.gz"
+          "version": "2.7.5",
+          "downloadUrl": "https://github.com/influxdata/influx-cli/archive/refs/tags/v2.7.5.tar.gz"
         }
       }
     },
@@ -7261,8 +7261,8 @@
         "type": "other",
         "other": {
           "name": "influxdb",
-          "version": "2.7.3",
-          "downloadUrl": "https://github.com/influxdata/influxdb/archive/refs/tags/v2.7.3.tar.gz"
+          "version": "2.7.5",
+          "downloadUrl": "https://github.com/influxdata/influxdb/archive/refs/tags/v2.7.5.tar.gz"
         }
       }
     },