bottlerocket-os · cbgbt · Feb 3, 2022 · Feb 1, 2022 · Feb 1, 2022 · Feb 1, 2022
diff --git a/packages/aws-iam-authenticator/.gitignore b/packages/aws-iam-authenticator/.gitignore
@@ -0,0 +1 @@
+0001-Update-vendored-go-dependencies.patch
diff --git a/packages/aws-iam-authenticator/Cargo.toml b/packages/aws-iam-authenticator/Cargo.toml
@@ -12,8 +12,13 @@ path = "pkg.rs"
 releases-url = "https://github.com/kubernetes-sigs/aws-iam-authenticator/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/kubernetes-sigs/aws-iam-authenticator/archive/v0.5.2/aws-iam-authenticator-0.5.2.tar.gz"
-sha512 = "a16a630096ed3223d156e1586f02ffcfcf256f12530ba565f5f1f649c83418cd71ea66c554c9e1edd1b44dd745d9393f4ed4c63c62677ae973e9bd9a1a24fe5b"
+url = "https://github.com/kubernetes-sigs/aws-iam-authenticator/archive/v0.5.3/aws-iam-authenticator-0.5.3.tar.gz"
+sha512 = "430af9fd04b9a94205a485281fb668f5bc18cdac569de0232fa98e08ebb0e08a8d233537bd3373a5f1e53cf529bc2050aebc34a4a53c8b29a831070e34213210"
+
+# This blob includes a patch which updates the vendored go dependencies of aws-iam-authenticator, which weren't updated upstream for the 0.5.3 release.
+[[package.metadata.build-package.external-files]]
+url = "https://cache.bottlerocket.aws/aws-iam-authenticator-0.5.3-Update-vendored-go-dependencies.patch/39c9ef0c143b4a6c1374c24cdd7a13a8f5662f206a3200f6d07224359ec0f8350e1456510e9c891fd2e01ac9d261b2d51239a03883b88f1936d8735a01d3bf5f/aws-iam-authenticator-0.5.3-Update-vendored-go-dependencies.patch"
+sha512 = "39c9ef0c143b4a6c1374c24cdd7a13a8f5662f206a3200f6d07224359ec0f8350e1456510e9c891fd2e01ac9d261b2d51239a03883b88f1936d8735a01d3bf5f"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/aws-iam-authenticator/aws-iam-authenticator.spec b/packages/aws-iam-authenticator/aws-iam-authenticator.spec
@@ -2,7 +2,7 @@
 %global gorepo aws-iam-authenticator
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 0.5.2
+%global gover 0.5.3
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0
@@ -15,6 +15,10 @@ License: Apache-2.0
 URL: https://%{goimport}
 Source0: https://%{goimport}/archive/v%{gover}/%{gorepo}-%{gover}.tar.gz
 Source1000: clarify.toml
+
+# 0.5.3 release did not include necessary vendored dependencies.
+Patch0001: aws-iam-authenticator-0.5.3-Update-vendored-go-dependencies.patch
+
 BuildRequires: git
 BuildRequires: %{_cross_os}glibc-devel
 

diff --git a/packages/chrony/0001-sys_linux-allow-clone3-and-pread64-in-seccomp-filter.patch b/packages/chrony/0001-sys_linux-allow-clone3-and-pread64-in-seccomp-filter.patch
diff --git a/packages/chrony/Cargo.toml b/packages/chrony/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://download.tuxfamily.org/chrony"
 
 [[package.metadata.build-package.external-files]]
-url = "https://download.tuxfamily.org/chrony/chrony-4.1.tar.gz"
-sha512 = "5e283d6a56e6852606c681a7c29c5786b102d584178cbd7033ebbc95a8e95533605631363b850a3087cca438a5878db7a317f120aab2fd856487d02fccfbcb1f"
+url = "https://download.tuxfamily.org/chrony/chrony-4.2.tar.gz"
+sha512 = "7f946b27de605b3ebea62cf23916dfad77c99e8b2338ba239ede6b8216ce436b3d4d87770f371c8d8e006507c51d5c831b51f067957abd2935adfdec3f5aa67d"
 
 [build-dependencies]
 glibc = { path = "../glibc" }

diff --git a/packages/chrony/chrony.spec b/packages/chrony/chrony.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}chrony
-Version: 4.1
+Version: 4.2
 Release: 1%{?dist}
 Summary: A versatile implementation of the Network Time Protocol
 License: GPL-2.0-only
@@ -10,9 +10,6 @@ Source2: chrony-conf
 Source3: chrony-sysusers.conf
 Source4: chrony-tmpfiles.conf
 
-# Fix seccomp filter for glibc 2.34+
-Patch0001: 0001-sys_linux-allow-clone3-and-pread64-in-seccomp-filter.patch
-
 BuildRequires: %{_cross_os}glibc-devel
 BuildRequires: %{_cross_os}libcap-devel
 BuildRequires: %{_cross_os}libseccomp-devel

diff --git a/packages/containerd/Cargo.toml b/packages/containerd/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://github.com/containerd/containerd/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/containerd/containerd/archive/v1.5.8/containerd-1.5.8.tar.gz"
-sha512 = "c769506ff6d98689c46ffee94d70ae00ef2f32e0daac1e631cbe8a587f67c7e4f83eb3895707362bdf46198b61823c99df1d8ca61095ab1415de5596f106fd07"
+url = "https://github.com/containerd/containerd/archive/v1.5.9/containerd-1.5.9.tar.gz"
+sha512 = "13d5b8bcfd811b1abf67008d1c664962f315cd45d885adaa88847bcc4f1c5d743dccd62bc34fe77348ca18a4f8841ce7a8a022cccb275b19b59017b3fbf1054b"
 
 # RPM BuildRequires
 [build-dependencies]

diff --git a/packages/containerd/containerd.spec b/packages/containerd/containerd.spec
@@ -2,9 +2,9 @@
 %global gorepo containerd
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.5.8
+%global gover 1.5.9
 %global rpmver %{gover}
-%global gitrev 1e5ef943eb76627a6d3b6de8cd1ef6537f393a71
+%global gitrev 1407cab509ff0d96baa4f0eb6ff9980270e6e620
 
 %global _dwz_low_mem_die_limit 0
 
@@ -25,9 +25,6 @@ Source1000: clarify.toml
 # TODO: submit this upstream, including a unit test.
 Patch1001: 1001-cri-set-default-RLIMIT_NOFILE.patch
 
-# CVE-2021-43816
-Patch2001: containerd-1.5-only-relabel-cri-managed-host-mounts.patch
-
 BuildRequires: git
 BuildRequires: %{_cross_os}glibc-devel
 Requires: %{_cross_os}runc

diff --git a/packages/docker-cli/Cargo.toml b/packages/docker-cli/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://github.com/docker/cli/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/docker/cli/archive/v20.10.7/cli-20.10.7.tar.gz"
-sha512 = "4523ae70cb27d848da119070171af2eb84e974ac39d70be4feee105e37c949487c7f72a9bc30c32ce71bffb0787e27b7b9194ce5a8aeae57bdfeb3f2d730010f"
+url = "https://github.com/docker/cli/archive/v20.10.12/cli-20.10.12.tar.gz"
+sha512 = "ac7c997f5751f2e34b9bcb9f026d3d0c2cd58c32a13e9255536b0eb0d7eabd81c42f2d608c0fe7725322b619f2360818b08379e847d598dd0bec570602ad224f"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/docker-cli/docker-cli.spec b/packages/docker-cli/docker-cli.spec
@@ -2,9 +2,9 @@
 %global gorepo cli
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 20.10.7
+%global gover 20.10.12
 %global rpmver %{gover}
-%global gitrev f0df35096d5f5e6b559b42c7fde6c65a2909f7c5
+%global gitrev e91ed5707e038b02af3b5120fa0835c5bedfd42e
 
 %global source_date_epoch 1492525740
 
@@ -19,9 +19,6 @@ URL: https://%{goimport}
 Source0: https://%{goimport}/archive/v%{gover}/cli-%{gover}.tar.gz
 Source1000: clarify.toml
 
-# CVE-2021-41092
-Patch0001: 0001-registry-ensure-default-auth-config-has-address.patch
-
 BuildRequires: git
 BuildRequires: %{_cross_os}glibc-devel
 

diff --git a/packages/docker-engine/Cargo.toml b/packages/docker-engine/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://github.com/moby/moby/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/moby/moby/archive/v20.10.11/moby-20.10.11.tar.gz"
-sha512 = "ac947e882abb02d52aea4aecb5dcfef6e23c86aadf98b49e3312ca3079dac7a01d6c936c0a4e51b3561def926ae50b4c5587063b8c58cac5c5de3c5e7985b120"
+url = "https://github.com/moby/moby/archive/v20.10.12/moby-20.10.12.tar.gz"
+sha512 = "f4122c8cbc67e6b7703856dc76d6f15d7fab1b2001d4916b89958d5319c16d8b8445881841ef4804e8d47d64694184aec1be93e22d7baceb021c4a99c2c03753"
 
 # RPM BuildRequires
 [build-dependencies]

diff --git a/packages/docker-engine/docker-engine.spec b/packages/docker-engine/docker-engine.spec
@@ -3,9 +3,9 @@
 %global goorg github.com/docker
 %global goimport %{goorg}/docker
 
-%global gover 20.10.11
+%global gover 20.10.12
 %global rpmver %{gover}
-%global gitrev 847da184ad5048b27f5bdf9d53d070f731b43180
+%global gitrev 459d0dfbbb51fb2423a43655e6c62368ec0f36c9
 
 %global source_date_epoch 1363394400
 

diff --git a/packages/docker-proxy/Cargo.toml b/packages/docker-proxy/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://github.com/docker/libnetwork/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/docker/libnetwork/archive/fa125a3512ee0f6187721c88582bf8c4378bd4d7/libnetwork-fa125a3512ee0f6187721c88582bf8c4378bd4d7.tar.gz"
-sha512 = "dd583218fbeba8aeac2e4143369ad55a3e6c15d64f198f73e3656a80d0281a4374fb3be7bc05b01425461bf830762aa2c950da68ed0e3ae5884643e9d178c69e"
+url = "https://github.com/docker/libnetwork/archive/64b7a4574d1426139437d20e81c0b6d391130ec8/libnetwork-64b7a4574d1426139437d20e81c0b6d391130ec8.tar.gz"
+sha512 = "6a94fe23ce1bab0a428ee4bbe20089f5a4470e72c5da156b2b1a89de01cca803374fd9cdcd4c5b25b86af1c4e956c75a1a5ad7fb6639def7bcec69859a77c047"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/docker-proxy/docker-proxy.spec b/packages/docker-proxy/docker-proxy.spec
@@ -3,12 +3,12 @@
 %global goimport %{goproject}/%{gorepo}
 # Use the libnetwork commit listed in this file for the docker version we ship:
 # https://github.com/moby/moby/blob/DOCKER-VERSION-HERE/vendor.conf
-%global commit fa125a3512ee0f6187721c88582bf8c4378bd4d7
+%global commit 64b7a4574d1426139437d20e81c0b6d391130ec8
 
 %global _dwz_low_mem_die_limit 0
 
 Name: %{_cross_os}docker-proxy
-Version: 20.10.04
+Version: 20.10.12
 Release: 1%{?dist}
 Summary: Docker CLI
 # mostly Apache-2.0, client/mflag is BSD-3-Clause

diff --git a/packages/e2fsprogs/Cargo.toml b/packages/e2fsprogs/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://mirrors.edge.kernel.org/pub/linux/kernel/people/tytso/e2fsprogs"
 
 [[package.metadata.build-package.external-files]]
-url = "https://mirrors.edge.kernel.org/pub/linux/kernel/people/tytso/e2fsprogs/v1.46.4/e2fsprogs-1.46.4.tar.xz"
-sha512 = "7d9cfdf00ed58e66049585e8382fe4977088956421a0fb8155900c69afd8857309ad2b9301b3f74c9c0afa7287a0ddba2fd1538fcf57858b37a9ab712390016d"
+url = "https://mirrors.edge.kernel.org/pub/linux/kernel/people/tytso/e2fsprogs/v1.46.5/e2fsprogs-1.46.5.tar.xz"
+sha512 = "53282e1c524f62a95012b1aceef296d494f5238c82c9b08b29fbe6a803dbf7ccfdcd9124eb2f11fe2ff9de26387c78751a92c3217ca414f6db6242098a72d3fa"
 
 [build-dependencies]
 glibc = { path = "../glibc" }

diff --git a/packages/e2fsprogs/e2fsprogs.spec b/packages/e2fsprogs/e2fsprogs.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}e2fsprogs
-Version: 1.46.4
+Version: 1.46.5
 Release: 1%{?dist}
 Summary: Tools for managing ext2, ext3, and ext4 file systems
 License: GPL-2.0-only AND LGPL-2.0-only AND LGPL-2.0-or-later AND BSD-3-Clause

diff --git a/packages/ecs-agent/0006-bottlerocket-Revert-removing-duplicate-build-tags.patch b/packages/ecs-agent/0006-bottlerocket-Revert-removing-duplicate-build-tags.patch
@@ -2813,7 +2813,7 @@ index b23fcdf9..1e73e997 100644
 --- a/agent/stats/task_unspecified.go
 +++ b/agent/stats/task_unspecified.go
 @@ -1,4 +1,5 @@
- //go:build !linux
+ //go:build !linux && !windows
 +// +build !linux
 
  // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.

diff --git a/packages/ecs-agent/Cargo.toml b/packages/ecs-agent/Cargo.toml
@@ -13,8 +13,8 @@ path = "pkg.rs"
 releases-url = "https://github.com/aws/amazon-ecs-agent/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/aws/amazon-ecs-agent/archive/v1.57.0/amazon-ecs-agent-v1.57.0.tar.gz"
-sha512 = "a5ec9251af2b5d56eaeb7e1c1005480eabfa43a60ee868c3bc48a78cb976c7369c7afe2c9cad85fcc2826dd56ca88f012d0e5743ff12244b7b29ed4778ce170b"
+url = "https://github.com/aws/amazon-ecs-agent/archive/v1.58.0/amazon-ecs-agent-v1.58.0.tar.gz"
+sha512 = "f8636874c81fd99afc219f9bb6153dfc1f5fc2c6e6a025ec734450d6b2a7410646ad629ef23d2f2249f36e90b69a8b69b5e923adb71f07b3c46ecfe87c138b6a"
 
 # The ECS agent repository includes two CNI plugins as git submodules.  git
 # archive does not include submodules, so the tarball above does not include

diff --git a/packages/ecs-agent/ecs-agent.spec b/packages/ecs-agent/ecs-agent.spec
@@ -2,9 +2,9 @@
 %global agent_gorepo amazon-ecs-agent
 %global agent_goimport %{agent_goproject}/%{agent_gorepo}
 
-%global agent_gover 1.57.0
+%global agent_gover 1.58.0
 # git rev-parse --short=8
-%global agent_gitrev fe79b107
+%global agent_gitrev 80ad4ca4
 
 %global ecscni_goproject github.com/aws
 %global ecscni_gorepo amazon-ecs-cni-plugins

diff --git a/packages/iputils/1000-skip-ipv6-test.patch b/packages/iputils/1000-skip-ipv6-test.patch
@@ -1,7 +1,7 @@
 diff --git iputils.orig/ping/meson.build iputils/ping/meson.build
 index 1e678ec..eedd04b 100644
---- iputils.orig/ping/meson.build
-+++ iputils/ping/meson.build
+--- iputils.orig/test/ping/meson.build
++++ iputils/ping/test/meson.build
 @@ -35,7 +35,7 @@ endif
  # https://github.com/actions/virtual-environments/issues/668
  ipv6_dst = []

diff --git a/packages/iputils/Cargo.toml b/packages/iputils/Cargo.toml
@@ -12,9 +12,9 @@ path = "pkg.rs"
 releases-url = "https://github.com/iputils/iputils/releases"
 
 [[package.metadata.build-package.external-files]]
-path = "iputils-20210722.tar.gz"
-url = "https://github.com/iputils/iputils/archive/20210722.tar.gz"
-sha512 = "8f85bf468f8ef1e2832e9bbf9009552df4a6d723dd130fa0d5b2aa3bae617c972f936143c2370c3b4ce2ba2499828c91a299ee42cf81fa81aabe10552db2b328"
+path = "iputils-20211215.tar.gz"
+url = "https://github.com/iputils/iputils/archive/20211215.tar.gz"
+sha512 = "191062e51f7c8e8b38e3e4a96845adb77cd69f487d548c7cc578fad544443b4bc0dbe965d8f8e6fbda0a2f5b2fe2829789c05f873190c53d773245959298f6e9"
 
 [build-dependencies]
 glibc = { path = "../glibc" }

diff --git a/packages/iputils/iputils.spec b/packages/iputils/iputils.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}iputils
-Version: 20210722
+Version: 20211215
 Release: 1%{?dist}
 Summary: A set of network monitoring tools
 License: GPL-2.0-or-later AND BSD-3-Clause

diff --git a/packages/kubernetes-1.20/Cargo.toml b/packages/kubernetes-1.20/Cargo.toml
@@ -15,8 +15,8 @@ package-name = "kubernetes-1.20"
 releases-url = "https://github.com/kubernetes/kubernetes/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/kubernetes/kubernetes/archive/v1.20.12/kubernetes-1.20.12.tar.gz"
-sha512 = "42f9d000454ae4717a9a7026fa0f1af192e160deddc6e44044993183036e67bdb9fdae02d9fcb7556370f75a44a739c49da5daf091d3b88b6dd4101e6aafe6ac"
+url = "https://github.com/kubernetes/kubernetes/archive/v1.20.15/kubernetes-1.20.15.tar.gz"
+sha512 = "760c75c5eef9410ee1f0efc2944f45d259fa41175ce064f1c18224df0dfb1355fb2a7b9652e0af3c814987d3ae86a96f39aa2b686280eed745bdfe6f29dfb35c"
 
 # RPM BuildRequires
 [build-dependencies]

diff --git a/packages/kubernetes-1.20/kubernetes-1.20.spec b/packages/kubernetes-1.20/kubernetes-1.20.spec
@@ -2,7 +2,7 @@
 %global gorepo kubernetes
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.20.12
+%global gover 1.20.15
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0

diff --git a/packages/kubernetes-1.21/Cargo.toml b/packages/kubernetes-1.21/Cargo.toml
@@ -15,8 +15,8 @@ package-name = "kubernetes-1.21"
 releases-url = "https://github.com/kubernetes/kubernetes/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/kubernetes/kubernetes/archive/v1.21.6/kubernetes-1.21.6.tar.gz"
-sha512 = "a53dc25aa091075d73b7f8ae9a518c019a16b821bce6cfe3ff191cf4098df8851de03ec0a9292e534045323b8300532a23e6caceae3e6dfaea00471eac16a223"
+url = "https://github.com/kubernetes/kubernetes/archive/v1.21.9/kubernetes-1.21.9.tar.gz"
+sha512 = "d334cab0fa3c173c12eb73c2f6f34a8745447525c6524ebd556cd18587345012e518a2ddb77484f48e01f4bbd795177b0c8b067bdf66715f60a70b0566ac66e8"
 
 # RPM BuildRequires
 [build-dependencies]

diff --git a/packages/kubernetes-1.21/kubernetes-1.21.spec b/packages/kubernetes-1.21/kubernetes-1.21.spec
@@ -2,7 +2,7 @@
 %global gorepo kubernetes
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.21.6
+%global gover 1.21.9
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0

diff --git a/packages/libacl/Cargo.toml b/packages/libacl/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://download-mirror.savannah.gnu.org/releases/acl"
 
 [[package.metadata.build-package.external-files]]
-url = "https://download-mirror.savannah.gnu.org/releases/acl/acl-2.2.53.tar.gz"
-sha512 = "176b7957fe0e7618e0b7bf2ac5071f7fa29417df718cce977661a576fa184e4af9d303b591c9d556b6ba8923e799457343afa401f5a9f7ecd9022185a4e06716"
+url = "https://download-mirror.savannah.gnu.org/releases/acl/acl-2.3.1.tar.gz"
+sha512 = "f101e27058c959f4c412f475c3fc77a90d1ead8728701e4ce04ff08b34139d35e0e72278c9ac7622ba6054e81c0aeca066e09491b5f5666462e3866705a0e892"
 
 [build-dependencies]
 glibc = { path = "../glibc" }

diff --git a/packages/libacl/libacl.spec b/packages/libacl/libacl.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libacl
-Version: 2.2.53
+Version: 2.3.1
 Release: 1%{?dist}
 Summary: Library for access control list support
 License: LGPL-2.1-or-later

diff --git a/packages/libaudit/Cargo.toml b/packages/libaudit/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://github.com/linux-audit/audit-userspace/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "https://github.com/linux-audit/audit-userspace/archive/v3.0.6/audit-userspace-3.0.6.tar.gz"
-sha512 = "4da1d0afa54b0439bd22c6bde51e955e965ff820d096665d5ffc973238950d92cb8075422809d4204bb92492037effc23b96a31310288be8f3b38cdd20b82bcd"
+url = "https://github.com/linux-audit/audit-userspace/archive/v3.0.7/audit-userspace-3.0.7.tar.gz"
+sha512 = "1582fada809f83fb89ed6baedd3bc51a67c88ce9cc2dc041ec51c5da89855b14c080cc6dffa1310c96f894cc2ac8b5e709fb4577d0dc9536f28a9617138db405"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libaudit/libaudit.spec b/packages/libaudit/libaudit.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libaudit
-Version: 3.0.6
+Version: 3.0.7
 Release: 1%{?dist}
 Summary: Library for the audit subsystem
 License: GPL-2.0-or-later AND LGPL-2.1-or-later

diff --git a/packages/libcap/Cargo.toml b/packages/libcap/Cargo.toml
@@ -12,8 +12,8 @@ path = "pkg.rs"
 releases-url = "https://sites.google.com/site/fullycapable/release-notes-for-libcap"
 
 [[package.metadata.build-package.external-files]]
-url = "https://git.kernel.org/pub/scm/libs/libcap/libcap.git/snapshot/libcap-2.60.tar.gz"
-sha512 = "0c65e82f226451e4498c5f2594e54aa29b92e9e4362fa8e99a08d2b64dab956950e80eeb7d9b688f619ae507265201a63a024d2fc77829100901b3a96210194e"
+url = "https://git.kernel.org/pub/scm/libs/libcap/libcap.git/snapshot/libcap-2.63.tar.gz"
+sha512 = "0db42bc9079c75b539fd7511531a2088ba37f8d4fe75799606976a3f36bc240c4b7c87402c4b71b9c455daed098a3ddaa31687d70ed45168d471df131e2898f1"
 
 [build-dependencies]
 glibc = { path = "../glibc" }

diff --git a/packages/libcap/libcap.spec b/packages/libcap/libcap.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libcap
-Version: 2.60
+Version: 2.63
 Release: 1%{?dist}
 Summary: Library for getting and setting POSIX.1e capabilities
 License: GPL-2.0-only OR BSD-3-Clause