ELBA-2021-17135

ELBA-2021-17135 - singularity Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2021-09-20

Description

[3.8.3-1]
- Upgrade to upstream 3.8.3

[3.8.2-1]
- Upgrade to upstream 3.8.2

[3.8.1-1]
- Upgrade to upstream 3.8.1

[3.8.0-1]
- Upgrade to upstream 3.8.0

[3.7.4-1]
- Upgrade to upstream security release 3.7.4

[3.7.3-1]
- Upgrade to upstream security release 3.7.3

[3.7.2-1]
- Upgrade to upstream 3.7.2.

[3.7.1-1]
- Upgrade to upstream 3.7.1.

[3.7.0-1]
- Upgrade to upstream 3.7.0.

[3.6.4-1]
- Upgrade to upstream 3.6.4.

[3.6.3-1]
- Upgrade to upstream 3.6.3.

[3.6.2-1]
- Upgrade to upstream 3.6.2.

[3.6.1-1]
- Upgrade to upstream 3.6.1.

[3.6.0-1]
- Upgrade to upstream 3.6.0. Remove patch #4679 for el8, since
golang-12 is now available for that build machine.

[3.5.3-1.1]
- Upgrade to upstream 3.5.3, keeping only patch #4769 on el8

[3.5.2-1.2]
- Add patch for PR #4974. Only the src rpm is being used, for
building a --without-suid installation, so this won't be released
to EPEL or Fedora other than rawhide..

[3.5.2-1.1]
- Upgrade to upstream 3.5.2, keeping #4769 patch only on el8

[3.5.1-1.1]
- Upgrade to upstream 3.5.1, keeping #4769 patch only on el8

[3.5.0-1.1]
- Apply patch from PR #4769 to build with golang-1.11 on el8 only

[3.5.0-1]
- Upgrade to upstream 3.5.0

[3.5.0~rc.2-1]
- Upgrade to upstream 3.5.0~rc.2.

[3.5.0~rc.1-1]
- Upgrade to upstream 3.5.0~rc.1. Drop PR #4522 patch.

[3.4.2-1.1]
- Upgrade to upstream 3.4.2. Remove PR #4522, no longer needed.
Still contains config fakeroot cli PR #4346.

[3.4.1-1.2]
- Add PR #4522 to fix sandbox rootless builds

[3.4.1-1.1]
- Update to upstream 3.4.0-1, keeping only config fakeroot cli PR #4346

[3.4.0-1.2]
- Add fix for bug that always enabled --pid (PR #4380)

[3.4.0-1.1]
- Update to upstream 3.4.0-1
- Fix compiles on non-64 bit architectures (PR #4370)
- Add config fakeroot CLI which was inadvertently left out of the upstream
release (PR #4346)

[3.3.0-1]
- Update to upstream 3.3.0-1

[3.2.1-1.1]
- Add patch for PR #3456 to make --home work with 'mount home = no'
- Add patch for PR #3803 to make bind mounts from read-only filesystems
work unprivileged

[3.2.1-1]
- Update to upstream 3.2.1-1

[3.2.0-1.1]
- Add PR #3419

[3.2.0-1]
- Update to upstream 3.2.0-1

[3.1.1-1.1]
- Add patch for CVE-2019-11328

[3.1.1-1]
- Update to upstream 3.1.1-1

[3.1.0-1]
- Update to upstream 3.1.0-1

[3.0.3-1]
- Update to upstream 3.0.3-1 release.

[3.0.3-rc2]
- Update to upstream 3.0.3-rc2

[3.0.3-rc1]
- Update to upstream 3.0.3-rc1

[3.0.2-1.2]
- Add patch for PR 2531

[3.0.2-1.1]
- Update to upstream 3.0.2
- Added patches for PRs 2472, 2478, 2481

[2.6.1-1.1]
- Update to released upstream 2.6.1

[2.6.0-1.1]
- Update to released upstream 2.6.0
- Rename PR 1638 to 1817
- Rename PR 1762 to 1818
- Note that PR 1324 was also renamed, to 1819

[2.5.999-1.4]
- Move the Requires /usr/bin/python3 to be under %package runtime instead
of under its %description.

[2.5.999-1.3]
- Move the BuildRequires /usr/bin/python3 back to the primary package,
because otherwise it doesn't get installed at build time. Leave
the Requires on the runtime subpackage.
- Add singularity.abignore to avoid warnings from abipkgdiff.

[2.5.999-1.2]
- Add PR #1324 which makes the docker:// and shub:// URLs work with only
the runtime subpackage. All the changes are to this file so it does
not add a patch. Moves python files to the runtime subpackage, so the
BuildRequires & Requires /usr/bin/python3 go back there as well.
- Improve the underlay option comment in singularity.conf as found in
the current version of PR #1638.

[2.5.999-1.1]
- Update to upstream 2.5.999, which is tagged as 2.6.0-rc2.
- Disable the underlay feature by default
- Move the BuildRequires: /usr/bin/python3 back to the singularity package
because there is no python in singularity-runtime.
- Add an additional Requires: /usr/bin/python3 for install time.

[2.5.99-1.1]
- Update to upstream 2.5.99, which is tagged as 2.6.0-rc1.
- Switch to using internally defined require_python3, which is true unless
%{osg} is defined, to decide whether or not to require python3.
- Get python3 patch from PR #1762 instead of custom defined.
- Move /usr/bin/python3 BuildRequires to singularity-runtime subpackage.
- Apply PR #1638, which adds the underlay feature.

- Only require python3 if macro defined

[2.5.2-1]
- Update to upstream high severity security release 2.5.2. See
https://github.com/singularityware/singularity/releases/tag/2.5.2
and CVE #2018-12021.
- Only require python3 if macro defined

[2.5.1-1]
- Update to upstream version 2.5.1

[2.5.0-1]
- Update to upstream version 2.5.0

[2.4.6-1]
- Update to upstream version 2.4.6

[2.2.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.2.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[2.2.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2.1-3]
- Drop patch 13, broken in the merged version
- Fix remaining arch restriction
- Fix configured container_dir

[2.2.1-2]
- Fix sexec/sexec-suid confusion
- Use _sharedstatedir, not _localstatedir, and make the mnt directories

[2.2.1-1]
- New version
- Various spec adjustments for the new version
- Replace the patches with a load more
- Remove RHEL5 rpm-isms

[2.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.0-10]
- Modify COPYING to avoid default licensing
- Patches for race warning and return values

[2.0-9]
- Require pyliblzma and debootstrap
- Patch for mounting kernel file systems
- Fix License tag
- Patch for bootstrap

[2.0-8]
- Revert part of -yum patch

[2.0-7]
- Actually apply patch5

[2.0-6]
- Patches for yum/dnf usage, Fedora example, installing rpm release package,
creating directories
- Change URL

[2.0-5]
- Modify snapshot bits per review instructions

[2.0-5]
- Patch for rpmlint warnings

[2.0-4]
- Revert last change; configure limits arch, and ftrace to be used again

[2.0-3]
- Don't build ftrace, ftype and remove the arch restriction

[2.0-2]
- Ship LICENSE, examples

[2.0-1]
- New version
- Replace spec features for el5
- Exclude ftrace, ftype

[1.0-6.e7409ff5]
- Updated snapshot

[1.0-5.20160420]
- Don't require which

[1.0-5.20160420]
- Snapshot version
- Remove resolver patch
- Add hardening ldflags

[1.0-4]
- Take description from readme

[1.0-3]
- Patch for missing utils for debug on el6
- More resolver changes

[1.0-2]
- Fix running text resolvers
- Don't configure twice

[1.0-1]
- New version
- BR automake, libtool and run autogen

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	singularity-3.8.3-1.el8.src.rpm	acd9e452435a10c05fdddaf0145589cc	-
	singularity-3.8.3-1.el8.aarch64.rpm	853f31207c77d733af4e309bcd3de6f1	-
Oracle Linux 8 (x86_64)	singularity-3.8.3-1.el8.src.rpm	acd9e452435a10c05fdddaf0145589cc	-
	singularity-3.8.3-1.el8.x86_64.rpm	05fa8d6cb0a6a17863f88609c043eb42	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team