[stable] update glibc for CVE-2023-4911

.github/workflows/add-override.yml

@@ -37,7 +37,7 @@ jobs:
   add-override:
     name: Add package override
     runs-on: ubuntu-latest
-    container: quay.io/fedora/fedora:latest
+    container: registry.fedoraproject.org/fedora:latest
     steps:
       - name: Install dependencies
         run: dnf install -y git jq python3-bodhi-client python3-pyyaml

ci/buildroot/Dockerfile

@@ -5,6 +5,6 @@
 #
 # This image is used by CoreOS CI to build software like
 # Ignition, rpm-ostree, ostree, coreos-installer, etc...
-FROM quay.io/fedora/fedora:38
+FROM registry.fedoraproject.org/fedora:38
 COPY . /src
 RUN ./src/install-buildroot.sh && yum clean all && rm /src -rf

kola-denylist.yaml

@@ -7,31 +7,97 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  # snooze: 2023-10-24 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   arches:
     - aarch64
   streams:
     - stable
     - testing
     - testing-devel
+- pattern: ext.config.networking.nameserver
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.no-persist-ip
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.prefer-ignition-networking
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.force-persist-ip
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.bridge-static-via-kargs
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
+- pattern: ext.config.networking.mtu-on-bond-kargs
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
+  # snooze: 2023-09-28 (disabled on promotion)
+  # warn: true (disabled on promotion)
+  streams:
+    - rawhide
+    - branched
+    - next-devel
+    - next
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  # snooze: 2023-10-13 (disabled on promotion)
+  # snooze: 2023-09-27 (disabled on promotion)
   # warn: true (disabled on promotion)
   platforms:
     - azure
-- pattern: ext.config.docker.basic
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  # snooze: 2023-10-13 (disabled on promotion)
-  # warn: true (disabled on promotion)
-  streams:
-    - rawhide
 - pattern: ext.config.kdump.crash
-  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1588
-  # snooze: 2023-10-24 (disabled on promotion)
+  tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1560
+  # snooze: 2023-09-30 (disabled on promotion)
   # warn: true (disabled on promotion)
-  arches:
-    - ppc64le
   streams:
     - rawhide
+    - next-devel
+    - next