`uclibc-ng`: upgrade to 1.0.41 to fix CVE-2022-30295 (#3240)

SPECS/uclibc-ng/uclibc-ng.signatures.json

@@ -1,6 +1,6 @@
 {
  "Signatures": {
-  "uClibc-ng-1.0.39.tar.xz": "cb089dfe14867a38f222d6428e85d0e1191dcbb66dd9b1a671484f6bc7c81920",
+  "uClibc-ng-1.0.41.tar.xz": "b32a92a0218d95922d6976464e6ef51e2ebacfbcdb605820458d9dbb8a61e025",
   "uClibc.config": "5cd0bebdcc29597e6abdcfcbb0d7309633dd843b273b0baca718e6d5f2fb0f1f"
  }
 }

SPECS/uclibc-ng/uclibc-ng.spec

@@ -3,7 +3,7 @@
 %global debug_package %{nil}
 Summary:        C library for embedded Linux
 Name:           uclibc-ng
-Version:        1.0.39
+Version:        1.0.41
 Release:        1%{?dist}
 License:        LGPLv2
 Vendor:         Microsoft Corporation
@@ -82,6 +82,9 @@ rm -rf  %{buildroot}/include/
 %{_libdir}/uClibc
 
 %changelog
+* Fri Jun 24 2022 Henry Beberman <henry.beberman@microsoft.com> - 1.0.41-1
+- Updating to version 1.0.41 to fix CVE-2022-30295.
+
 * Mon Jan 03 2022 Pawel Winogrodzki <pawelwi@microsoft.com> - 1.0.39-1
 - Updating to version 1.0.39.
 

cgmanifest.json

@@ -25717,8 +25717,8 @@
         "type": "other",
         "other": {
           "name": "uclibc-ng",
-          "version": "1.0.39",
-          "downloadUrl": "https://downloads.uclibc-ng.org/releases/1.0.39/uClibc-ng-1.0.39.tar.xz"
+          "version": "1.0.41",
+          "downloadUrl": "https://downloads.uclibc-ng.org/releases/1.0.41/uClibc-ng-1.0.41.tar.xz"
         }
       }
     },