[AUTO-CHERRYPICK] Upgrade OpenIPMI to 2.0.36 to fix CVE-2024-42934 - …

…branch main (#10734)

Co-authored-by: suresh-thelkar <[email protected]>

SPECS/OpenIPMI/OpenIPMI.signatures.json

@@ -1,7 +1,7 @@
 {
- "Signatures": {
- "OpenIPMI-2.0.32.tar.gz": "f6d0fd4c0a74b05f80907229d0b270f54ca23294bcc11979f8b8d12766786945",
- "ipmi.service": "7f55866340569bfbb4bcce32a6218667d0e8dbba99d9aac4ef8e192d3952fa71",
- "openipmi-helper": "e646bf49b3962dd0cd6261d5a7c44240261c856e0bc47d70bdc2720a2ea7d530"
- }
-}
+  "Signatures": {
+  "ipmi.service": "7f55866340569bfbb4bcce32a6218667d0e8dbba99d9aac4ef8e192d3952fa71",
+  "openipmi-helper": "e646bf49b3962dd0cd6261d5a7c44240261c856e0bc47d70bdc2720a2ea7d530",
+  "OpenIPMI-2.0.36.tar.gz": "a0403148fa5f7bed930c958a4d1c558047e273763a408b3a0368edc137cc55d9"
+  }
+}

SPECS/OpenIPMI/OpenIPMI.spec

@@ -1,13 +1,13 @@
 Summary: A shared library implementation of IPMI and the basic tools
 Name: OpenIPMI
-Version: 2.0.32
+Version: 2.0.36
 Release: 1%{?dist}
 License: LGPLv2+ AND GPLv2+ OR BSD
 Vendor: Microsoft Corporation
 Distribution: Mariner
 Group: System Environment/Base
 URL: https://sourceforge.net/projects/openipmi/
-Source0: https://downloads.sourceforge.net/openipmi/OpenIPMI-2.0.32.tar.gz
+Source0: https://downloads.sourceforge.net/openipmi/%{name}-%{version}.tar.gz
 Source1: openipmi-helper
 Source2: ipmi.service
 BuildRequires: ncurses-devel
@@ -188,6 +188,9 @@ echo "disable ipmi.service" > %{buildroot}%{_libdir}/systemd/system-preset/50-ip
 %{_mandir}/man5/ipmi_sim_cmd.5.gz
 
 %changelog
+* Mon Oct 14 2024 CBL-Mariner Servicing Account <[email protected]> - 2.0.36-1
+- Upgrade to 2.0.36 to fix CVE-2024-42934
+
 * Tue Feb 22 2022 Max Brodeur-Urbas <[email protected]> - 2.0.32-1
 - Upgrading to version 2.0.32.
 

cgmanifest.json

@@ -15384,8 +15384,8 @@
  "type": "other",
  "other": {
  "name": "OpenIPMI",
- "version": "2.0.32",
- "downloadUrl": "https://downloads.sourceforge.net/openipmi/OpenIPMI-2.0.32.tar.gz"
+ "version": "2.0.36",
+ "downloadUrl": "https://downloads.sourceforge.net/openipmi/OpenIPMI-2.0.36.tar.gz"
  }
  }
  },