diff --git a/SPECS/tink-worker/tink-worker.signatures.json b/SPECS/tink-worker/tink-worker.signatures.json index babfb97f45..8823369f45 100644 --- a/SPECS/tink-worker/tink-worker.signatures.json +++ b/SPECS/tink-worker/tink-worker.signatures.json @@ -1,7 +1,7 @@ { "Signatures": { - "tink-worker-v1.1.2.tar.gz": "d8068506964758d807c658c1589f44c22359aa8f0f954797e308f358530a275f", + "tink-worker-v1.1.4.tar.gz": "794259f4c3b7d41beced1863764885144a47881245f0e640ab827ca3f03d7e8f", "tink-worker.service": "0bd4bdf62618966a33567859e78fd7f88269275a1c730f8c472f4a266443e404", - "tink-worker-v1.1.2-vendor.tar.gz": "c917e973ab5fc685f4ca9993e1d306236fea6090b780b2bbdf8c1956e9d5e6a3" + "tink-worker-v1.1.4-vendor.tar.gz": "6b1840a79530a7ab0077dc0630e07200a576c4c30480a28c66ba6f8c74842ccb" } } \ No newline at end of file diff --git a/SPECS/tink-worker/tink-worker.spec b/SPECS/tink-worker/tink-worker.spec index 5fc593c1bd..09ba2ab649 100644 --- a/SPECS/tink-worker/tink-worker.spec +++ b/SPECS/tink-worker/tink-worker.spec @@ -2,8 +2,8 @@ Summary: In-memory Operating System Installation Environment for Executing Tinkerbell Workflows Name: tink-worker -Version: 1.1.2 -Release: 2%{?dist} +Version: 1.1.4 +Release: 1%{?dist} Distribution: Edge Microvisor Toolkit Vendor: Intel Corporation License: Apache-2.0 @@ -14,7 +14,7 @@ Source2: tink-worker-v%{version}-vendor.tar.gz %{?systemd_requires} BuildRequires: golang < 1.25.0 -BuildRequires: golang >= 1.24.7 +BuildRequires: golang >= 1.24.9 BuildRequires: systemd-rpm-macros %description @@ -46,7 +46,14 @@ install -Dp -m0644 %{SOURCE1} %{buildroot}%{_unitdir}/tink-worker.service %{_unitdir}/tink-worker.service %changelog -* Tue Nov 25 2025 Lee Chee Yang - 1.0.2-2 +* Tue Dec 2 2025 Andy - 1.1.4-1 +- Update version to fix CVE +- CVE-2025-47913 +- CVE-2025-47914 +- CVE-2025-52881 +- CVE-2024-25621 + +* Tue Nov 25 2025 Lee Chee Yang - 1.1.2-2 - amend build required golang version * Mon Nov 3 2025 Andy - 1.1.2-1 diff --git a/cgmanifest.json b/cgmanifest.json index 0df520d565..b0ab885190 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -29606,8 +29606,8 @@ "type": "other", "other": { "name": "tink-worker", - "version": "1.1.2", - "downloadUrl": "https://github.com/open-edge-platform/infra-onboarding/archive/refs/tags/tink-worker/v1.1.2.tar.gz" + "version": "1.1.4", + "downloadUrl": "https://github.com/open-edge-platform/infra-onboarding/archive/refs/tags/tink-worker/v1.1.4.tar.gz" } } },