ELSA-2021-0705
- ULN >
- Oracle Linux Errata repository >
- ELSA-2021-0705
ELSA-2021-0705 - container-tools:1.0 security update
| Type: | SECURITY |
| Severity: | IMPORTANT |
| Release Date: | 2021-03-05 |
Description
buildah
[1.5-8.gite94b4f9.0.1]
- Fixes troubles with oracle registry login [Orabug: 29937283]
[1.5-8.gite94b4f9]
- bump release to preserve upgrade path
- Related: #1821193
[1.5-4.gite94b4f9]
- fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process'
- Resolves: #1818127
[1.5-3.gite94b4f9]
- re-enable debuginfo
[1.5-2.gite94b4f9]
- go toolset not in scl anymore
[1.5-1.gite94b4f9]
- rebase
[1.4-3.git608fa84]
- fedora-like go compiler macro in buildrequires is enough
[1.4-2.git608fa84]
- rebase
[1.3-3.git4888163]
- Resolves: #1615611 - rebuild with gobuild tag 'no_openssl'
[1.3-2.git4888163]
- Resolves: #1614009 - built with updated scl-ized go-toolset dep
- build with %gobuild
[1.3-1]
- Bump to v1.3
- Vendor in lates containers/image
- build-using-dockerfile: let -t include transports again
- Block use of /proc/acpi and /proc/keys from inside containers
- Fix handling of --registries-conf
- Fix becoming a maintainer link
- add optional CI test fo darwin
- Don't pass a nil error to errors.Wrapf()
- image filter test: use kubernetes/pause as a 'since'
- Add --cidfile option to from
- vendor: update containers/storage
- Contributors need to find the CONTRIBUTOR.md file easier
- Add a --loglevel option to build-with-dockerfile
- Create Development plan
- cmd: Code improvement
- allow buildah cross compile for a darwin target
- Add unused function param lint check
- docs: Follow man-pages(7) suggestions for SYNOPSIS
- Start using github.com/seccomp/containers-golang
- umount: add all option to umount all mounted containers
- runConfigureNetwork(): remove an unused parameter
- Update github.com/opencontainers/selinux
- Fix buildah bud --layers
- Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
- main: if unprivileged, reexec in a user namespace
- Vendor in latest imagebuilder
- Reduce the complexity of the buildah.Run function
- mount: output it before replacing lastError
- Vendor in latest selinux-go code
- Implement basic recognition of the '--isolation' option
- Run(): try to resolve non-absolute paths using /usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/home/opc/.local/bin:/home/opc/bin
- Run(): don't include any default environment variables
- build without seccomp
- vendor in latest runtime-tools
- bind/mount_unsupported.go: remove import errors
- Update github.com/opencontainers/runc
- Add Capabilities lists to BuilderInfo
- Tweaks for commit tests
- commit: recognize committing to second storage locations
- Fix ARGS parsing for run commands
- Add info on registries.conf to from manpage
- Switch from using docker to podman for testing in .papr
- buildah: set the HTTP User-Agent
- ONBUILD tutorial
- Add information about the configuration files to the install docs
- Makefile: add uninstall
- Add tilde info for push to troubleshooting
- mount: support multiple inputs
- Use the right formatting when adding entries to /etc/hosts
- Vendor in latest go-selinux bindings
- Allow --userns-uid-map/--userns-gid-map to be global options
- bind: factor out UnmountMountpoints
- Run(): simplify runCopyStdio()
- Run(): handle POLLNVAL results
- Run(): tweak terminal mode handling
- Run(): rename 'copyStdio' to 'copyPipes'
- Run(): don't set a Pdeathsig for the runtime
- Run(): add options for adding and removing capabilities
- Run(): don't use a callback when a slice will do
- setupSeccomp(): refactor
- Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
- Escape use of '_' in .md docs
- Break out getProcIDMappings()
- Break out SetupIntermediateMountNamespace()
- Add Multi From Demo
- Use the c/image conversion code instead of converting configs manually
- Don't throw away the manifest MIME type and guess again
- Consolidate loading manifest and config in initConfig
- Pass a types.Image to Builder.initConfig
- Require an image ID in importBuilderDataFromImage
- Use c/image/manifest.GuessMIMEType instead of a custom heuristic
- Do not ignore any parsing errors in initConfig
- Explicitly handle 'from scratch' images in Builder.initConfig
- Fix parsing of OCI images
- Simplify dead but dangerous-looking error handling
- Don't ignore v2s1 history if docker_version is not set
- Add --rm and --force-rm to buildah bud
- Add --all,-a flag to buildah images
- Separate stdio buffering from writing
- Remove tty check from images --format
- Add environment variable BUILDAH_RUNTIME
- Add --layers and --no-cache to buildah bud
- Touch up images man
- version.md: fix DESCRIPTION
- tests: add containers test
- tests: add images test
- images: fix usage
- fix make clean error
- Change 'registries' to 'container registries' in man
- add commit test
- Add(): learn to record hashes of what we add
- Minor update to buildah config documentation for entrypoint
- Bump to v1.2-dev
- Add registries.conf link to a few man pages
[1.2-3]
- do not depend on btrfs-progs for rhel8
[1.2-2]
- buildah does not require ostree
[1.2-1]
- Vendor in latest containers/image
- build-using-dockerfile: let -t include transports again
- Block use of /proc/acpi and /proc/keys from inside containers
- Fix handling of --registries-conf
- Fix becoming a maintainer link
- add optional CI test fo darwin
- Don't pass a nil error to errors.Wrapf()
- image filter test: use kubernetes/pause as a 'since'
- Add --cidfile option to from
- vendor: update containers/storage
- Contributors need to find the CONTRIBUTOR.md file easier
- Add a --loglevel option to build-with-dockerfile
- Create Development plan
- cmd: Code improvement
- allow buildah cross compile for a darwin target
- Add unused function param lint check
- docs: Follow man-pages(7) suggestions for SYNOPSIS
- Start using github.com/seccomp/containers-golang
- umount: add all option to umount all mounted containers
- runConfigureNetwork(): remove an unused parameter
- Update github.com/opencontainers/selinux
- Fix buildah bud --layers
- Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
- main: if unprivileged, reexec in a user namespace
- Vendor in latest imagebuilder
- Reduce the complexity of the buildah.Run function
- mount: output it before replacing lastError
- Vendor in latest selinux-go code
- Implement basic recognition of the '--isolation' option
- Run(): try to resolve non-absolute paths using /usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/home/opc/.local/bin:/home/opc/bin
- Run(): don't include any default environment variables
- build without seccomp
- vendor in latest runtime-tools
- bind/mount_unsupported.go: remove import errors
- Update github.com/opencontainers/runc
- Add Capabilities lists to BuilderInfo
- Tweaks for commit tests
- commit: recognize committing to second storage locations
- Fix ARGS parsing for run commands
- Add info on registries.conf to from manpage
- Switch from using docker to podman for testing in .papr
- buildah: set the HTTP User-Agent
- ONBUILD tutorial
- Add information about the configuration files to the install docs
- Makefile: add uninstall
- Add tilde info for push to troubleshooting
- mount: support multiple inputs
- Use the right formatting when adding entries to /etc/hosts
- Vendor in latest go-selinux bindings
- Allow --userns-uid-map/--userns-gid-map to be global options
- bind: factor out UnmountMountpoints
- Run(): simplify runCopyStdio()
- Run(): handle POLLNVAL results
- Run(): tweak terminal mode handling
- Run(): rename 'copyStdio' to 'copyPipes'
- Run(): don't set a Pdeathsig for the runtime
- Run(): add options for adding and removing capabilities
- Run(): don't use a callback when a slice will do
- setupSeccomp(): refactor
- Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
- Escape use of '_' in .md docs
- Break out getProcIDMappings()
- Break out SetupIntermediateMountNamespace()
- Add Multi From Demo
- Use the c/image conversion code instead of converting configs manually
- Don't throw away the manifest MIME type and guess again
- Consolidate loading manifest and config in initConfig
- Pass a types.Image to Builder.initConfig
- Require an image ID in importBuilderDataFromImage
- Use c/image/manifest.GuessMIMEType instead of a custom heuristic
- Do not ignore any parsing errors in initConfig
- Explicitly handle 'from scratch' images in Builder.initConfig
- Fix parsing of OCI images
- Simplify dead but dangerous-looking error handling
- Don't ignore v2s1 history if docker_version is not set
- Add --rm and --force-rm to buildah bud
- Add --all,-a flag to buildah images
- Separate stdio buffering from writing
- Remove tty check from images --format
- Add environment variable BUILDAH_RUNTIME
- Add --layers and --no-cache to buildah bud
- Touch up images man
- version.md: fix DESCRIPTION
- tests: add containers test
- tests: add images test
- images: fix usage
- fix make clean error
- Change 'registries' to 'container registries' in man
- add commit test
- Add(): learn to record hashes of what we add
- Minor update to buildah config documentation for entrypoint
- Add registries.conf link to a few man pages
[1.1-1]
- Drop capabilities if running container processes as non root
- Print Warning message if cmd will not be used based on entrypoint
- Update 01-intro.md
- Shouldn't add insecure registries to list of search registries
- Report errors on bad transports specification when pushing images
- Move parsing code out of common for namespaces and into pkg/parse.go
- Add disable-content-trust noop flag to bud
- Change freenode chan to buildah
- runCopyStdio(): don't close stdin unless we saw POLLHUP
- Add registry errors for pull
- runCollectOutput(): just read until the pipes are closed on us
- Run(): provide redirection for stdio
- rmi, rm: add test
- add mount test
- Add parameter judgment for commands that do not require parameters
- Add context dir to bud command in baseline test
- run.bats: check that we can run with symlinks in the bundle path
- Give better messages to users when image can not be found
- use absolute path for bundlePath
- Add environment variable to buildah --format
- rm: add validation to args and all option
- Accept json array input for config entrypoint
- Run(): process RunOptions.Mounts, and its flags
- Run(): only collect error output from stdio pipes if we created some
- Add OnBuild support for Dockerfiles
- Quick fix on demo readme
- run: fix validate flags
- buildah bud should require a context directory or URL
- Touchup tutorial for run changes
- Validate common bud and from flags
- images: Error if the specified imagename does not exist
- inspect: Increase err judgments to avoid panic
- add test to inspect
- buildah bud picks up ENV from base image
- Extend the amount of time travis_wait should wait
- Add a make target for Installing CNI plugins
- Add tests for namespace control flags
- copy.bats: check ownerships in the container
- Fix SELinux test errors when SELinux is enabled
- Add example CNI configurations
- Run: set supplemental group IDs
- Run: use a temporary mount namespace
- Use CNI to configure container networks
- add/secrets/commit: Use mappings when setting permissions on added content
- Add CLI options for specifying namespace and cgroup setup
- Always set mappings when using user namespaces
- Run(): break out creation of stdio pipe descriptors
- Read UID/GID mapping information from containers and images
- Additional bud CI tests
- Run integration tests under travis_wait in Travis
- build-using-dockerfile: add --annotation
- Implement --squash for build-using-dockerfile and commit
- Vendor in latest container/storage for devicemapper support
- add test to inspect
- Vendor github.com/onsi/ginkgo and github.com/onsi/gomega
- Test with Go 1.10, too
- Add console syntax highlighting to troubleshooting page
- bud.bats: print '' before checking its contents
- Manage 'Run' containers more closely
- Break Builder.Run()'s 'run runc' bits out
- util.ResolveName(): handle completion for tagged/digested image names
- Handle /etc/hosts and /etc/resolv.conf properly in container
- Documentation fixes
- Make it easier to parse our temporary directory as an image name
- Makefile: list new pkg/ subdirectoris as dependencies for buildah
- containerImageSource: return more-correct errors
- API cleanup: PullPolicy and TerminalPolicy should be types
- Make 'run --terminal' and 'run -t' aliases for 'run --tty'
- Vendor github.com/containernetworking/cni v0.6.0
- Update github.com/containers/storage
- Update github.com/projectatomic/libpod
- Add support for buildah bud --label
- buildah push/from can push and pull images with no reference
- Vendor in latest containers/image
- Update gometalinter to fix install.tools error
- Update troubleshooting with new run workaround
- Added a bud demo and tidied up
- Attempt to download file from url, if fails assume Dockerfile
- Add buildah bud CI tests for ENV variables
- Re-enable rpm .spec version check and new commit test
- Update buildah scratch demo to support el7
- Added Docker compatibility demo
- Update to F28 and new run format in baseline test
- Touchup man page short options across man pages
- Added demo dir and a demo. chged distrorlease
- builder-inspect: fix format option
- Add cpu-shares short flag (-c) and cpu-shares CI tests
- Minor fixes to formatting in rpm spec changelog
- Fix rpm .spec changelog formatting
- CI tests and minor fix for cache related noop flags
- buildah-from: add effective value to mount propagation
[1.0-1]
- Remove buildah run cmd and entrypoint execution
- Add Files section with registries.conf to pertinent man pages
- Force 'localhost' as a default registry
- Add --compress, --rm, --squash flags as a noop for bud
- Add FIPS mode secret to buildah run and bud
- Add config --comment/--domainname/--history-comment/--hostname
- Add support for --iidfile to bud and commit
- Add /bin/sh -c to entrypoint in config
- buildah images and podman images are listing different sizes
- Remove tarball as an option from buildah push --help
- Update entrypoint behaviour to match docker
- Display imageId after commit
- config: add support for StopSignal
- Allow referencing stages as index and names
- Add multi-stage builds support
- Vendor in latest imagebuilder, to get mixed case AS support
- Allow umount to have multi-containers
- Update buildah push doc
- buildah bud walks symlinks
- Imagename is required for commit atm, update manpage
[0.16-3.git532e267]
- Resolves: #1573681
- built commit 532e267
[0.16.0-2.git6f7d05b]
- built commit 6f7d05b
[0.16-1]
- Add support for shell
- Vendor in latest containers/image
- docker-archive generates docker legacy compatible images
- Do not create subdirectories for layers with no configs
- Ensure the layer IDs in legacy docker/tarfile metadata are unique
- docker-archive: repeated layers are symlinked in the tar file
- sysregistries: remove all trailing slashes
- Improve docker/* error messages
- Fix failure to make auth directory
- Create a new slice in Schema1.UpdateLayerInfos
- Drop unused storageImageDestination.{image,systemContext}
- Load a *storage.Image only once in storageImageSource
- Support gzip for docker-archive files
- Remove .tar extension from blob and config file names
- ostree, src: support copy of compressed layers
- ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
- image: fix docker schema v1 -> OCI conversion
- Add /etc/containers/certs.d as default certs directory
- Change image time to locale, add troubleshooting.md, add logo to other mds
- Allow --cmd parameter to have commands as values
- Document the mounts.conf file
- Fix man pages to format correctly
- buildah from now supports pulling images using the following transports:
- docker-archive, oci-archive, and dir.
- If the user overrides the storage driver, the options should be dropped
- Show Config/Manifest as JSON string in inspect when format is not set
- Adds feature to pull compressed docker-archive files
[0.15-1]
- Fix handling of buildah run command options
[0.14-1]
- If commonOpts do not exist, we should return rather then segfault
- Display full error string instead of just status
- Implement --volume and --shm-size for bud and from
- Fix secrets patch for buildah bud
- Fixes the naming issue of blobs and config for the dir transport by removing the .tar extension
[0.13-1.git99066e0]
- use correct version
[0.12-4.git99066e0]
- enable debuginfo
[0.12-3.git99066e0]
- BR: libseccomp-devel
[0.12-2.git99066e0]
- Resolves: #1548535
- built commit 99066e0
[0.12-1]
- Added handing for simpler error message for Unknown Dockerfile instructions.
- Change default certs directory to /etc/containers/certs.dir
- Vendor in latest containers/image
- Vendor in latest containers/storage
- build-using-dockerfile: set the 'author' field for MAINTAINER
- Return exit code 1 when buildah-rmi fails
- Trim the image reference to just its name before calling getImageName
- Touch up rmi -f usage statement
- Add --format and --filter to buildah containers
- Add --prune,-p option to rmi command
- Add authfile param to commit
- Fix --runtime-flag for buildah run and bud
- format should override quiet for images
- Allow all auth params to work with bud
- Do not overwrite directory permissions on --chown
- Unescape HTML characters output into the terminal
- Fix: setting the container name to the image
- Prompt for un/pwd if not supplied with --creds
- Make bud be really quiet
- Return a better error message when failed to resolve an image
- Update auth tests and fix bud man page
[0.11-3.git49095a8]
- Resolves: #1542236 - add ostree and bump runc dep
[0.11-2.git49095a8]
- rebased to 49095a83f8622cf69532352d183337635562e261
[0.11-1]
- Add --all to remove containers
- Add --all functionality to rmi
- Show ctrid when doing rm -all
- Ignore sequential duplicate layers when reading v2s1
- Lots of minor bug fixes
- Vendor in latest containers/image and containers/storage
[0.10-2]
- Fix checkin
[0.10-1]
- Display Config and Manifest as strings
- Bump containers/image
- Use configured registries to resolve image names
- Update to work with newer image library
- Add --chown option to add/copy commands
[0.9-2.git04ea079]
- build for all arches
[0.9-1]
- Allow push to use the image id
- Make sure builtin volumes have the correct label
[0.8-1]
- Buildah bud was failing on SELinux machines, this fixes this
- Block access to certain kernel file systems inside of the container
[0.7-1]
- Ignore errors when trying to read containers buildah.json for loading SELinux reservations
- Use credentials from kpod login for buildah
- Adds support for converting manifest types when using the dir transport
- Rework how we do UID resolution in images
- Bump github.com/vbatts/tar-split
- Set option.terminal appropriately in run
[0.5-5.gitf7dc659]
- revert building for s390x, it is intended for rhel 7.5
[0.5-4]
- Add requires for container-selinux
[0.5-3.gitf7dc659]
- build for s390x, https://bugzilla.redhat.com/show_bug.cgi?id=1482234
[0.5-2]
- Bump github.com/vbatts/tar-split
- Fixes CVE That could allow a container image to cause a DOS
[0.5-1]
- Add secrets patch to buildah
- Add proper SELinux labeling to buildah run
- Add tls-verify to bud command
- Make filtering by date use the image's date
- images: don't list unnamed images twice
- Fix timeout issue
- Add further tty verbiage to buildah run
- Make inspect try an image on failure if type not specified
- Add support for
- Tons of bug fixes and code cleanup
[0.4-2.git01db066]
- bump to latest version
- set GIT_COMMIT at build-time
[0.4-1.git9cbccf88c]
- Add default transport to push if not provided
- Avoid trying to print a nil ImageReference
- Add authentication to commit and push
- Add information on buildah from man page on transports
- Remove --transport flag
- Run: do not complain about missing volume locations
- Add credentials to buildah from
- Remove export command
- Run(): create the right working directory
- Improve 'from' behavior with unnamed references
- Avoid parsing image metadata for dates and layers
- Read the image's creation date from public API
- Bump containers/storage and containers/image
- Don't panic if an image's ID can't be parsed
- Turn on --enable-gc when running gometalinter
- rmi: handle truncated image IDs
[0.4-1.git9cbccf8]
- bump to v0.4
[0.3-4.gitb9b2a8a]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
[0.3-3.gitb9b2a8a]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[0.3-2.gitb9b2a8a7e]
- Bump for inclusion of OCI 1.0 Runtime and Image Spec
[0.2.0-1.gitac2aad6]
- buildah run: Add support for -- ending options parsing
- buildah Add/Copy support for glob syntax
- buildah commit: Add flag to remove containers on commit
- buildah push: Improve man page and help information
- buildah run: add a way to disable PTY allocation
- Buildah docs: clarify --runtime-flag of run command
- Update to match newer storage and image-spec APIs
- Update containers/storage and containers/image versions
- buildah export: add support
- buildah images: update commands
- buildah images: Add JSON output option
- buildah rmi: update commands
- buildah containers: Add JSON output option
- buildah version: add command
- buildah run: Handle run without an explicit command correctly
- Ensure volume points get created, and with perms
- buildah containers: Add a -a/--all option
[0.1.0-2.git597d2ab9]
- Release Candidate 1
- All features have now been implemented.
[0.0.1-1.git7a0a5333]
- First package for Fedora
containernetworking-plugins
[0.7.4-4.git9ebe139]
- bump release to preserve upgrade path
- Related: #1821193
[0.7.4-3.git9ebe139]
- re-enable debuginfo
[0.7.4-2.git9ebe139]
- rebase, removed patch that is already upstream
[0.7.3-7.git19f2f28]
- go tools not in scl anymore
[0.7.3-6.git19f2f28]
- correct tag specification format in %gobuild macro
[0.7.3-5.git19f2f28]
- Resolves: #1616062 - patch to revert coreos/go-iptables bump
[0.7.3-4.git19f2f28]
- Resolves:#1603012
- fix versioning, upstream got it wrong at 7.2
[0.7.2-3.git19f2f28]
- disable i686 temporarily for appstream builds
- update golang deps and gobuild definition
[0.7.2-2.git19f2f28]
- rebase
[0.7.0-103.gitdd8ff8a]
- enable scl with the toolset
[0.7.0-102.gitdd8ff8a]
- remove devel and unittest subpackages
- use new go-toolset deps
[0.7.0-101]
- rebase
- patches already upstream, removed
[0.6.0-6]
- Imported from Fedora
- Renamed CNI -> plugins
[0.6.0-4]
- Own the libexec cni directory
[0.6.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[0.6.0-2]
- skip settling IPv4 addresses
[0.6.0-1]
- rebased to 7480240de9749f9a0a5c8614b17f1f03e0c06ab9
[0.5.2-7]
- do not install to /opt (against Fedora Guidelines)
[0.5.2-6]
- Enable devel subpackage
[0.5.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
[0.5.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[0.5.2-3]
- excludearch: ppc64 as it's not in goarches anymore
- re-enable s390x
[0.5.2-2]
- upstream moved to github.com/containernetworking/plugins
- built commit dcf7368
- provides: containernetworking-plugins
- use vendored deps because they're a lot less of a PITA
- excludearch: s390x for now (rhbz#1466865)
[0.5.2-1]
- Update to 0.5.2
- Softlink to default /opt/cni/bin directories
[0.5.1-1]
- Initial package
container-selinux
[2:2.124.0-1.gitf958d0c]
- update to 2.124.0
- Resolves: #1816541
[2:2.94-2.git1e99f1d]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1766316, #1766215
[2:2.94-1.git1e99f1d]
- Resolves: #1690286 - bump to v2.94
- Resolves: #1693806, #1689255
[2:2.89-1.git2521d0d]
- bump to v2.89
[2:2.75-1.git99e2cfd]
- bump to v2.75
- built commit 99e2cfd
[2:2.74-1]
- Resolves: #1641655 - bump to v2.74
- built commit a62c2db
[2:2.73-3]
- tweak macro for fedora - applies to rhel8 as well
[2:2.73-2]
- moved changelog entries:
- Define spc_t as a container_domain, so that container_runtime will transition
to spc_t even when setup with nosuid.
- Allow container_runtimes to setattr on callers fifo_files
- Fix restorecon to not error on missing directory
[2.69-3]
- Make sure we pull in the latest selinux-policy
[2.69-2]
- Add map support to container-selinux for RHEL 7.5
- Dontudit attempts to write to kernel_sysctl_t
[2.68-1]
- Add label for /var/lib/origin
- Add customizable_file_t to customizable_types
[2.67-1]
- Add policy for container_logreader_t
[2.66-1]
- Allow dnsmasq to dbus chat with spc_t
[2.64-1]
- Allow containers to create all socket classes
[2.62-1]
- Label overlay directories under /var/lib/containers/ correctly
[2.61-1]
- Allow spc_t to load kernel modules from inside of container
[2.60-1]
- Allow containers to list cgroup directories
- Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.
[2.58-2]
- Run restorecon /usr/bin/podman in postinstall
[2.58-1]
- Add labels to allow podman to be run from a systemd unit file
[2.57-1]
- Set the version of SELinux policy required to the latest to fix build issues.
[2.56-1]
- Allow container_runtime_t to transition to spc_t over unlabeled files
[2.55-1]
Allow iptables to read container state
Dontaudit attempts from containers to write to /proc/self
Allow spc_t to change attributes on container_runtime_t fifo files
[2.52-1]
- Add better support for writing custom selinux policy for customer container domains.
[2.51-1]
- Allow shell_exec_t as a container_runtime_t entrypoint
[2.50-1]
- Allow bin_t as a container_runtime_t entrypoint
[2.49-1]
- Add support for MLS running container runtimes
- Add missing allow rules for running systemd in a container
[2.48-1]
- Update policy to match master branch
- Remove typebounds and replace with nnp_transition and nosuid_transition calls
[2.41-1]
- Add support to nnp_transition for container domains
- Eliminates need for typebounds.
[2.40-1]
- Allow container_runtime_t to use user ttys
- Fixes bounds check for container_t
[2.39-1]
- Allow container runtimes to use interited terminals. This helps
satisfy the bounds check of container_t versus container_runtime_t.
[2.38-1]
- Allow container runtimes to mmap container_file_t devices
- Add labeling for rhel push plugin
[2.37-1]
- Allow containers to use inherited ttys
- Allow ostree to handle labels under /var/lib/containers/ostree
[2.36-1]
- Allow containers to relabelto/from all file types to container_file_t
[2.35-1]
- Allow container to map chr_files labeled container_file_t
[2.34-1]
- Dontaudit container processes getattr on kernel file systems
[2.33-1]
- Allow containers to read /etc/resolv.conf and /etc/hosts if volume
- mounted into container.
[2.32-1]
- Make sure users creating content in /var/lib with right labels
[2.31-1]
- Allow the container runtime to dbus chat with dnsmasq
- add dontaudit rules for container trying to write to /proc
[2.29-1]
- Add support for lxcd
- Add support for labeling of tmpfs storage created within a container.
[2.28-1]
- Allow a container to umount a container_file_t filesystem
[2.27-1]
- Allow container runtimes to work with the netfilter sockets
- Allow container_file_t to be an entrypoint for VM's
- Allow spc_t domains to transition to svirt_t
[2.24-1]
- Make sure container_runtime_t has all access of container_t
[2.23-1]
- Allow container runtimes to create sockets in tmp dirs
[2.22-1]
- Add additonal support for crio labeling.
[2.21-3]
- Fixup spec file conditionals
[2:2.21-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[2.21-1]
- Allow containers to execmod on container_share_t files.
[2.20-2]
- Relabel runc and crio executables
[2.20-1]
- Allow container processes to getsession
[2:2.19-2.1]
- update release tag to isolate from 7.3
[2:2.19-1]
- Fix mcs transition problem on stdin/stdout/stderr
- Add labels for CRI-O
- Allow containers to use tunnel sockets
[2:2.15-1.1]
- Resolves: #1451289
- rebase to v2.15
- built @origin/RHEL-1.12 commit 583ca40
[2:2.10-2.1]
- Make sure we have a late enough version of policycoreutils
[2:2.10-1]
- Update to the latest container-selinux patch from upstream
- Label files under /usr/libexec/lxc as container_runtime_exec_t
- Give container_t access to XFRM sockets
- Allow spc_t to dbus chat with init system
- Allow containers to read cgroup configuration mounted into a container
[2:2.9-4]
- Resolves: #1425574
- built commit 79a6d70
[2:2.9-3]
- Resolves: #1420591
- built @origin/RHEL-1.12 commit 8f876c4
[2:2.9-2]
- built @origin/RHEL-1.12 commit 33cb78b
[2:2.8-2]
-
[2:2.7-1]
- built origin/RHEL-1.12 commit 21dd37b
[2:2.4-2]
- correct version-release in changelog entries
[2:2.4-1]
- Add typebounds statement for container_t from container_runtime_t
- We should only label runc not runc*
[2:2.3-1]
- Fix labeling on /usr/bin/runc.*
- Add sandbox_net_domain access to container.te
- Remove containers ability to look at /etc content
[2:2.2-4]
- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7
[2:2.2-3]
- properly disable docker module in %post
[2:2.2-2]
- depend on selinux-policy-targeted
- relabel docker-latest* files as well
[2:2.2-1]
- bump to v2.2
- additional labeling for ocid
[2:2.0-2]
- install policy at level 200
- From: Dan Walsh
[2:2.0-1]
- Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a
standalone package)
- include projectatomic/RHEL-1.12 branch commit for building on centos/rhel
[2:1.12.4-29]
- new package (separated from docker)
criu
fuse-overlayfs
[0.3-5]
- revert fuse-overlayfs to commit 6d269aa
- Resolves: #1720707
[0.3-4.dev.gitd760789]
- rebase
[0.3-2]
- rebase
- Resolves:#1666510
[0.1-7.dev.git50c7a50]
- Resolves: #1640232
- built commit 50c7a50
[0.1-6.dev.git1c72a1a]
- Resolves: #1614856 - add manpage
- built commit 1c72a1a
- add BR: go-md2man
[0.1-5.dev.gitd40ac75]
- built commit d40ac75
- remove fedora bz ids
- Exclude ix86 and ppc64
[0.1-4.dev.git79c70fd]
- Resolves: #1609598 - initial upload to Fedora
- bundled gnulib
[0.1-3.dev.git79c70fd]
- correct license field
[0.1-2.dev.git79c70fd]
- fix license
[0.1-1.dev.git13575b6]
- First package for Fedora
oci-systemd-hook
oci-umount
podman
[1.0.0-8.git921f98f]
- fix 'podman can not create user inside of container' regression introduced by
patch for CVE-2021-20188
- Related: #1918285
[1.0.0-7.git921f98f]
- fix CVE-2021-20188
- Resolves: #1918285
[1.0.0-6.git921f98f]
- fix 'podman run errors out/segfaults in container-tools-1.0-8.3.0'
- Resolves: #1882267
[1.0.0-5.git921f98f]
- bump release to preserve upgrade path
- Resolves: #1821193
[1.0.0-4.git921f98f]
- fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process'
- Resolves: #1818122
[1.0.0-3.git921f98f]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1766294, #1766322
[1.0.0-2.git921f98f]
- rebase
[1.0.0-1.git82e8011]
- rebase to v1, yay!
- rebase conmon to 9b1f0a08285a7f74b21cc9b6bfd98a48905a7ba2
- Resolves:#1623282
- python interface removed, moved to https://github.com/containers/python-podman/
[0.12.1.2-4.git9551f6b]
- re-enable debuginfo
[0.12.1.2-3.git9551f6b]
- python libraries added
- resolves: #1657180
[0.12.1.2-2.git9551f6b]
- rebase
[0.11.1.1-3.git594495d]
- go tools not in scl anymore
[0.11.1.1-2.git594495d]
- fedora-like buildrequires go toolset
[0.11.1.1-1.git594495d]
- Resolves: #1636230 - build with FIPS enabled golang toolchain
- bump to v0.11.1.1
- built commit 594495d
[0.11.1-3.gita4adfe5]
- podman-docker provides docker
- Resolves: #1650355
[0.11.1-2.gita4adfe5]
- Require platform-python-setuptools instead of python3-setuptools
- Resolves: rhbz#1650144
[0.11.1-1.gita4adfe5]
- bump to v0.11.1
- built libpod commit a4adfe5
- built conmon from cri-o commit 464dba6
[0.10.1.3-5.gitdb08685]
- Resolves: #1625384 - keep BR: device-mapper-devel but don't build with it
- not having device-mapper-devel seems to have brew not recognize %{_unitdir}
[0.10.1.3-4.gitdb08685]
- Resolves: #1625384 - correctly add buildtags to remove devmapper
[0.10.1.3-3.gitdb08685]
- Resolves: #1625384 - build without device-mapper-devel (no podman support) and lvm2
[0.10.1.3-2.gitdb08685]
- Resolves: #1625384 - depend on lvm2
[0.10.1.3-1.gitdb08685]
- Resolves: #1640298 - update vendored buildah to allow building when there are
running containers
- bump to v0.10.1.3
- built podman commit db08685
[0.10.1.2-1.git2b4f8d1]
- Resolves: #1625378
- bump to v0.10.1.2
- built podman commit 2b4f8d1
[0.10.1.1-1.git4bea3e9]
- bump to v0.10.1.1
- built podman commit 4bea3e9
[0.10.1-1.gite4a1553]
- bump podman to v0.10.1
- built podman commit e4a1553
- built conmon from cri-o commit a30f93c
[0.9.3.1-4.git1cd906d]
- rebased cri-o to 1.11.6
[0.9.3.1-3.git1cd906d]
- rebase
[0.9.2-2.git37a2afe]
- rebase to podman 0.9.2
- rebase to cri-o 0.11.4
[0.9.1.1-2.git123de30]
- rebase
[0.8.4-1.git9f9b8cf]
- bump to v0.8.4
- built commit 9f9b8cf
- upstream username changed from projectatomic to containers
- use containernetworking-plugins >= 0.7.3-5
[0.8.2.1-2.git7a526bb]
- Resolves: #1615607 - rebuild with gobuild tag 'no_openssl'
[0.8.2.1-1.git7a526bb]
- Upstream 0.8.2.1 release
- Add support for podman-docker
Resolves: rhbz#1615104
[0.8.2-1.dev.git8b2d38e]
- Resolves: #1614710 - podman search name includes registry
- bump to v0.8.2-dev
- built libpod commit 8b2d38e
- built conmon from cri-o commit acc0ee7
[0.8.1-2.git6b4ab2a]
- Add recommends for slirp4netns and container-selinux
[0.8.1-2.git6b4ab2a]
- bump to v0.8.1
- use %go{build,generate} instead of go build and go generate
- update go deps to use scl-ized builds
- No need for Makefile patch for python installs
[0.8.1-1.git6b4ab2a]
- Bump to v0.8.1
[0.7.4-2.git079121]
- podman should not require atomic-registries
[0.7.4-1.dev.git9a18681]
- bump to v0.7.4-dev
- built commit 9a18681
[0.7.3-2.git079121]
- Turn on ostree support
- Upstream 0.7.3
[0.7.2-2.git4ca4c5f]
- Upstream 0.7.2 release
[0.7.1-3.git84cfdb2]
- rebuilt
[0.7.1-2.git84cfdb2]
- rebase to 84cfdb2
[0.7.1-1.git802d4f2]
- Upstream 0.7.1 release
[0.6.4-2.gitd5beb2f]
- disable devel and unittest subpackages
- include conditionals for rhel-8.0
[0.6.4-1.gitd5beb2f]
- do not compress debuginfo with dwz to support delve debugger
[0.6.1-3.git3e0ff12]
- do not compress debuginfo with dwz to support delve debugger
[0.6.1-2.git3e0ff12]
- bash completion shouldn't have shebang
[0.6.1-1.git3e0ff12]
- Resolves: #1584429 - drop capabilities when running a container as non-root
- bump to v0.6.1
- built podman commit 3e0ff12
- built conmon from cri-o commit 1c0c3b0
- drop containernetworking-plugins subpackage, it's now split out into a standalone
package
[0.4.1-4.gitb51d327]
- Resolves: #1572538 - build host-device and portmap plugins
[0.4.1-3.gitb51d327]
- correct dep on containernetworking-plugins
[0.4.1-2.gitb51d327]
- add containernetworking-plugins v0.7.0 as a subpackage (podman dep)
- release tag for the containernetworking-plugins is actually gotten from
podman release tag.
[0.4.1-1.gitb51d327]
- bump to v0.4.1
- built commit b51d327
[0.3.3-1.dev.gitbc358eb]
- built podman commit bc358eb
- built conmon from cri-o commit 712f3b8
[0.3.2-1.gitf79a39a]
- Release 0.3.2-1
[0.3.1-2.git98b95ff]
- Correct RPM version
[0.3.1-1-gitc187538]
- Release 0.3.1-1
[0.2.2-2.git525e3b1]
- Build on ARMv7 too (Fedora supports containers on that arch too)
[0.2.2-1.git525e3b1]
- Release 0.2.2
[0.2.1-1.git3d0100b]
- Release 0.2.1
[0.2-3.git3d0100b]
- Add dep for atomic-registries
[0.2-2.git3d0100b]
- Add more 64bit arches
- Add containernetworking-cni dependancy
- Add iptables dependancy
[0-2.1.git3d0100]
- Release 0.2
[0-0.3.git367213a]
- Resolves: #1541554 - first official build
- built commit 367213a
[0-0.2.git0387f69]
- built commit 0387f69
[0-0.1.gitc1b2278]
- First package for Fedora
runc
[1.0.0-56.rc5.dev.git2abd837]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1766328, #1766300
[1.0.0-55.rc5.dev.git2abd837]
- Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
- Resolves: CVE-2019-5736
[1.0.0-54.rc5.dev.git2abd837]
- re-enable debuginfo
[1.0.0-53.rc5.dev.git2abd837]
- go toolset not in scl anymore
[1.0.0-52.rc5.dev.git2abd837]
- rebase
[2:1.0.0-51.dev.gitfdd8055]
- Fix handling of tmpcopyup
[2:1.0.0-49.rc5.dev.gitb4e2ecb]
- %gobuild uses no_openssl
- remove unused devel and unit-test subpackages
[2:1.0.0-48.rc5.dev.gitad0f525]
- build with %gobuild
- exlude i686 temporarily because of go-toolset issues
[1.0.0-47.dev.gitb4e2ecb]
- Rebuild with fixed binutils
[2:1.0.0-46.dev.gitb4e2ecb]
- Add patch https://github.com/opencontainers/runc/pull/1807 to allow
- runc and podman to work with sd_notify
[2:1.0.0-40.rc5.dev.gitad0f525]
- Remove sysclt handling, not needed in RHEL8
- Make sure package built with seccomp flags
- Remove rectty
- Add completions
[2:1.0.0-36.rc5.dev.gitad0f525]
- Better handling of user namespace
[2:1.0.0-31.rc5.git0cbfd83]
- Fix issues between SELinux and UserNamespace
[1.0.0-27.rc5.dev.git4bb1fe4]
- rebuilt, placed missing changelog entry back
[2:1.0.0-26.rc5.git4bb1fe4]
- release v1.0.0~rc5
[1.0.0-26.rc4.git9f9c962]
- Bump to the latest from upstream
[1.0.0-25.rc4.gite6516b3]
- built commit e6516b3
[1.0.0-24.rc4.dev.gitc6e4a1e.1]
- rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
- https://github.com/opencontainers/runc/pull/1651
[1.0.0-23.rc4.git1d3ab6d]
- Resolves: #1524654
[1.0.0-22.rc4.git1d3ab6d]
- Many Stability fixes
- Many fixes for rootless containers
- Many fixes for static builds
[1.0.0-21.rc4.dev.gitaea4f21]
- enable debuginfo and include -buildmode=pie for go build
[1.0.0-20.rc4.dev.gitaea4f21]
- use Makefile
[1.0.0-19.rc4.dev.gitaea4f21]
- disable debuginfo temporarily
[1.0.0-18.rc4.dev.gitaea4f21]
- enable debuginfo
[1.0.0-17.rc4.gitaea4f21]
- Add container-selinux prerequires to make sure runc is labeled correctly
[1.0.0-16.rc4.dev.gitaea4f21]
- correct the release tag 'rc4dev' -> 'rc4.dev' cause I'm OCD
[1.0.0-15.rc4dev.gitaea4f21]
- Use the same checkout as Fedora for lates CRI-O
[1.0.0-14.rc4dev.git84a082b]
- rebase to 84a082bfef6f932de921437815355186db37aeb1
[1.0.0-13.rc3.gitd40db12]
- Resolves: #1479489
- built commit d40db12
[1.0.0-12.1.gitf8ce01d]
- disable s390x temporarily because of indefinite wait times on brew
[1.0.0-11.1.gitf8ce01d]
- correct previous bogus date :
[1.0.0-10.1.gitf8ce01d]
- Resolves: #1441737 - run sysctl_apply for sysctl knob
[1.0.0-9.1.gitf8ce01d]
- Resolves: #1447078 - change default root path
- add commit e800860 from runc @projectatomic/change-root-path
[1.0.0-8.1.gitf8ce01d]
- Resolves: #1441737 - enable kernel sysctl knob /proc/sys/fs/may_detach_mounts
[1.0.0-7.1.gitf8ce01d]
- Resolves: #1429675
- built @opencontainers/master commit f8ce01d
[1.0.0-4.1.gitee992e5]
- built @projectatomic/master commit ee992e5
[1.0.0-3.rc2]
- Resolves: #1426674
- built projectatomic/runc_rhel_7 commit 5d93f81
[1.0.0-2.rc2]
- Resolves: #1419702 - rebase to latest upstream master
- built commit b263a43
[1.0.0-1.rc2]
- Resolves: #1412239 - *CVE-2016-9962* - set init processes as non-dumpable,
runc patch from Michael Crosby
[0.1.1-6]
- Resolves: #1373980 - rebuild for 7.3.0
[0.1.1-5]
- build with golang >= 1.6.2
[0.1.1-4]
- release tags were inconsistent in the previous build
[0.1.1-1]
- Resolves: #1341267 - rebase runc to v0.1.1
[0.1.0-3]
- add selinux build tag
- add BR: libseccomp-devel
[0.1.0-2]
- Resolves: #1328970 - add seccomp buildtag
[0.1.0-1]
- Resolves: rhbz#1328616 - rebase to v0.1.0
[0.0.8-1.git4155b68]
- Resolves: rhbz#1277245 - bump to 0.0.8
- Resolves: rhbz#1302363 - criu is a runtime dep
- Resolves: rhbz#1302348 - libseccomp-golang is bundled in Godeps
- manpages included
[1:0.0.5-0.1.git97bc9a7]
- Update to 0.0.5, introduce Epoch for Fedora due to 0.2 version instead of 0.0.2
[0.2-0.2.git90e6d37]
- First package for Fedora
resolves: #1255179
skopeo
[1:0.1.32-6.git1715c90.0.1]
- Update registry conf file [Orabug: 31306708]
- Add oracle registry into the conf file [Orabug: 29845934]
- Fix oracle registry login issues [Orabug: 29937192]
[1:0.1.32-6.git1715c90]
- bump release to preserve upgrade path
- Related: #1821193
[1:0.1.32-4.git1715c90]
- rebuild because of CVE-2019-9512 and CVE-2019-9514
- Resolves: #1772130, #1772135
[1:0.1.32-3.git1715c90]
- rebase
[1:0.1.32-2.git1715c90]
- re-enable debuginfo
[1:0.1.31-12.gitb0b750d]
- go tools not in scl anymore
[1:0.1.31-11.gitb0b750d]
- Resolves: #1615609
- built upstream tag v0.1.31
[1:0.1.31-10.git0144aa8]
- Resolves: #1616069 - correct order of registries
[1:0.1.31-9.git0144aa8]
- Resolves: #1615609 - rebuild with gobuild tag 'no_openssl'
[1:0.1.31-8.git0144aa8]
- Resolves: #1614934 - containers-common soft dep on slirp4netns and
fuse-overlayfs
[1:0.1.31-7.git0144aa8]
- build with %gobuild
- use scl-ized go-toolset as dep
- disable i686 builds temporarily because of go-toolset issues
[1:0.1.31-6.git0144aa8]
- add statx to seccomp.json to containers-config
- add seccomp.json to containers-config
[1:0.1.31-4.git0144aa8]
- Resolves: #1597629 - handle dependency issue for skopeo-containers
- rename skopeo-containers to containers-common as in Fedora
[1:0.1.31-3.git0144aa8]
- Resolves: #1583762 - btrfs dep removal needs exclude_graphdriver_btrfs
buildtag
[1:0.1.31-2.git0144aa8]
- correct bz in previous changelog
[1:0.1.31-1.git0144aa8]
- Resolves: #1580938 - resolve FTBFS
- Resolves: #1583762 - remove dependency on btrfs-progs-devel
- bump to v0.1.31 (from master)
- built commit ca3bff6
- use go-toolset deps for rhel8
[0.1.29-5.git7add6fc]
- Fix small typo in registries.conf
[0.1.29-4.git]
- Add policy.json.5
[0.1.29-3.git]
- Add registries.conf
[0.1.29-2.git]
- Add registries.conf man page
[0.1.29-1.git]
- bump to 0.1.29-1
- Updated containers/image
docker-archive generates docker legacy compatible images
Do not create subdirectories for layers with no configs
Ensure the layer IDs in legacy docker/tarfile metadata are unique
docker-archive: repeated layers are symlinked in the tar file
sysregistries: remove all trailing slashes
Improve docker/* error messages
Fix failure to make auth directory
Create a new slice in Schema1.UpdateLayerInfos
Drop unused storageImageDestination.{image,systemContext}
Load a *storage.Image only once in storageImageSource
Support gzip for docker-archive files
Remove .tar extension from blob and config file names
ostree, src: support copy of compressed layers
ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
image: fix docker schema v1 -> OCI conversion
Add /etc/containers/certs.d as default certs directory
[0.1.28-2.git0270e56]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[0.1.28-1.git]
- Vendor in fixed libraries in containers/image and containers/storage
[0.1.27-1.git]
- Fix Conflicts to Obsoletes
- Add better docs to man pages.
- Use credentials from authfile for skopeo commands
- Support storage='' in /etc/containers/storage.conf
- Add global --override-arch and --override-os options
[0.1.25-2.git2e8377a7]
- Add manifest type conversion to skopeo copy
- User can select from 3 manifest types: oci, v2s1, or v2s2
- e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory
[0.1.25-2.git7fd6f66b]
- Force storage.conf to default to overlay
[0.1.25-1.git7fd6f66b]
- Fix CVE in tar-split
- copy: add shared blob directory support for OCI sources/destinations
- Aligning Docker version between containers/image and skopeo
- Update image-tools, and remove the duplicate Sirupsen/logrus vendor
- makefile: use -buildmode=pie
[0.1.24-8.git28d4e08a]
- Add /usr/share/containers/mounts.conf
[0.1.24-7.git28d4e08a]
- Bug fixes
- Update to release
[0.1.24-6.dev.git28d4e08]
- skopeo-containers conflicts with docker-rhsubscription <= 2:1.13.1-31
[0.1.24-5.dev.git28d4e08]
- Add rhel subscription secrets data to skopeo-containers
[0.1.24-4.dev.git28d4e08]
- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.
[0.1.24-3.dev.git28d4e08]
- built commit 28d4e08
[0.1.24-2.dev.git875dd2e]
- built commit 875dd2e
- Resolves: gh#416
[0.1.24-1.dev.gita41cd0]
- bump to 0.1.24-dev
- correct a prior bogus date
- fix macro in comment warning
[0.1.23-6.dev.git1bbd87]
- Change name of storage.conf.5 man page to containers-storage.conf.5, since
it conflicts with inn package
- Also remove default to 'overalay' in the configuration, since we should
- allow containers storage to pick the best default for the platform.
[0.1.23-5.git1bbd87f]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
[0.1.23-4.git1bbd87f]
- Rebuild with binutils fix for ppc64le (#1475636)
[0.1.23-3.git1bbd87f]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[0.1.23-2.dev.git1bbd87]
- Fix storage.conf man page to be storage.conf.5.gz so that it works.
[0.1.23-1.dev.git1bbd87]
- Support for OCI V1.0 Images
- Update to image-spec v1.0.0 and revendor
- Fixes for authentication
[0.1.22-2.dev.git5d24b67]
- Epoch: 1 for CentOS as CentOS Extras' build already has epoch set to 1
[0.1.22-1.dev.git5d24b67]
- Give more useful help when explaining usage
- Also specify container-storage as a valid transport
- Remove docker reference wherever possible
- vendor in ostree fixes
[0.1.21-1.dev.git0b73154]
- Add support for storage.conf and storage-config.5.md from github container storage package
- Bump to the latest version of skopeo
- vendor.conf: add ostree-go
- it is used by containers/image for pulling images to the OSTree storage.
- fail early when image os does not match host os
- Improve documentation on what to do with containers/image failures in test-skopeo
- We now have the docker-archive: transport
- Integration tests with built registries also exist
- Support /etc/docker/certs.d
- update image-spec to v1.0.0-rc6
[0.1.20-1.dev.git0224d8c]
- BZ #1380078 - New release
[0.1.19-2.dev.git0224d8c]
- No golang support for ppc64. Adding exclude arch. BZ #1445490
[0.1.19-1.dev.git0224d8c]
- bump to v0.1.19-dev
- built commit 0224d8c
[0.1.17-3.dev.git2b3af4a]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
[0.1.17-2.dev.git2b3af4a]
- Rebuild for gpgme 1.18
[0.1.17-1.dev.git2b3af4a]
- bump to 0.1.17-dev
[0.1.14-6.git550a480]
- Fix BZ#1391932
[0.1.14-5.git550a480]
- Conflicts with atomic in skopeo-containers
[0.1.14-4.git550a480]
- built skopeo-containers
[0.1.14-3.gitd830391]
- built mtrmac/integrate-all-the-things commit d830391
[0.1.14-2.git362bfc5]
- built commit 362bfc5
[0.1.14-1.gitffe92ed]
- build origin/master commit ffe92ed
[0.1.13-6]
- https://fedoraproject.org/wiki/Changes/golang1.7
[0.1.13-5]
- include go-srpm-macros and compiler(go-compiler) in fedora conditionals
- define %gobuild if not already
- add patch to build with older version of golang
[0.1.13-4]
- update to v0.1.12
[0.1.12-3]
- fix go build source path
[0.1.12-2]
- update to v0.1.12
[0.1.11-1]
- update to v0.1.11
[0.1.10-1]
- update to v0.1.10
- change runcom -> projectatomic
[0.1.9-1]
- update to v0.1.9
[0.1.8-1]
- update to v0.1.8
[0.1.4-2]
- https://fedoraproject.org/wiki/Changes/golang1.6
[0.1.4]
- First package for Fedora
slirp4netns
[0.1-5.dev.gitc4e1bc5]
- backport fix for CVE-2020-7039
- Resolves: #1791578
[0.1-4.dev.gitc4e1bc5]
- actually add CVE-2019-14378 patch to dist-git
- Related: RHELPLAN-25139
[0.1-3.dev.gitc4e1bc5]
- Fix CVE-2019-14378 (#1768394).
[0.1-2.dev.gitc4e1bc5]
- changed summary
[0.1-1.dev.gitc4e1bc5]
- First package for RHEL 8
- import from Fedora rawhide
- Exclude ix86 and ppc64
Related CVEs
| CVE-2021-20188 |
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory |
| Oracle Linux 8 (aarch64) | buildah-1.5-8.gite94b4f9.0.1.module+el8.3.0+9668+293abd4d.src.rpm | 1de72e9a69ce8aca1c3012a5072eeecb | - |
| container-selinux-2.124.0-1.gitf958d0c.module+el8.3.0+9668+293abd4d.src.rpm | 4c9018dbe582d2eb53f73ea22abe6c8c | - | |
| containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+9668+293abd4d.src.rpm | ac1129cf3793df2b5788f25a2d2cd91d | - | |
| criu-3.12-9.module+el8.3.0+9668+293abd4d.src.rpm | 45eba8ff537da926bb844c1612428b14 | - | |
| fuse-overlayfs-0.3-5.module+el8.3.0+9668+293abd4d.src.rpm | be3f555f1a76c2233f4bf0cf2d61eb37 | - | |
| oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+9668+293abd4d.src.rpm | c4117722a4bac2473610f577940ef70a | - | |
| oci-umount-2.3.4-2.git87f9237.module+el8.3.0+9668+293abd4d.src.rpm | bfcb792bc5492921580ba034c92c9b54 | - | |
| podman-1.0.0-8.git921f98f.module+el8.3.0+9668+293abd4d.src.rpm | 47f17e81ab8381b240333ae89695d4b1 | - | |
| runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+9668+293abd4d.src.rpm | 621a5f24daac92fe5f981c53adb284fd | - | |
| skopeo-0.1.32-6.git1715c90.0.1.module+el8.3.0+9668+293abd4d.src.rpm | 9724fe7941bbc539db18030cbde49f82 | - | |
| slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+9668+293abd4d.src.rpm | 140715895161b2fb1f327abf252ed2f3 | - | |
| buildah-1.5-8.gite94b4f9.0.1.module+el8.3.0+9668+293abd4d.aarch64.rpm | 190d33ae2e0c40c4f17c66b0c357ad31 | - | |
| container-selinux-2.124.0-1.gitf958d0c.module+el8.3.0+9668+293abd4d.noarch.rpm | df2d17a69116fe072dc3dbbff5985b32 | - | |
| containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+9668+293abd4d.aarch64.rpm | f7819863cdd739b80da90b6250ec6ad1 | - | |
| containers-common-0.1.32-6.git1715c90.0.1.module+el8.3.0+9668+293abd4d.aarch64.rpm | 11178656d4fc2c843490dd485843e0a1 | - | |
| crit-3.12-9.module+el8.3.0+9668+293abd4d.aarch64.rpm | dda42c58d4f19ab0afd186de717b1ee8 | - | |
| criu-3.12-9.module+el8.3.0+9668+293abd4d.aarch64.rpm | 20041a2f763c55a9f7b41f121db198d1 | - | |
| fuse-overlayfs-0.3-5.module+el8.3.0+9668+293abd4d.aarch64.rpm | 1c2c3a802b3cb141f3779ed867b20811 | - | |
| oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+9668+293abd4d.aarch64.rpm | 1c2fa5de5baa78f331e00ffe6c703775 | - | |
| oci-umount-2.3.4-2.git87f9237.module+el8.3.0+9668+293abd4d.aarch64.rpm | 4677244aefdbdbe7755678ff7ca1d6ea | - | |
| podman-1.0.0-8.git921f98f.module+el8.3.0+9668+293abd4d.aarch64.rpm | c56b959837430e64ae95be6cbc797f99 | - | |
| podman-docker-1.0.0-8.git921f98f.module+el8.3.0+9668+293abd4d.noarch.rpm | ccb76de47b96555332347c114361922f | - | |
| python3-criu-3.12-9.module+el8.3.0+9668+293abd4d.aarch64.rpm | 902936a6f71839b910b455ad3bcc096b | - | |
| runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+9668+293abd4d.aarch64.rpm | 125b3eabadc7e947e9df10c7f05ca6ba | - | |
| skopeo-0.1.32-6.git1715c90.0.1.module+el8.3.0+9668+293abd4d.aarch64.rpm | 8f47334d02a09d0abc70a8ee947e60ab | - | |
| slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+9668+293abd4d.aarch64.rpm | 7773bc092250228efb495bdb80f567d5 | - | |
| Oracle Linux 8 (x86_64) | buildah-1.5-8.gite94b4f9.0.1.module+el8.3.0+9668+293abd4d.src.rpm | 1de72e9a69ce8aca1c3012a5072eeecb | - |
| container-selinux-2.124.0-1.gitf958d0c.module+el8.3.0+9668+293abd4d.src.rpm | 4c9018dbe582d2eb53f73ea22abe6c8c | - | |
| containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+9668+293abd4d.src.rpm | ac1129cf3793df2b5788f25a2d2cd91d | - | |
| criu-3.12-9.module+el8.3.0+9668+293abd4d.src.rpm | 45eba8ff537da926bb844c1612428b14 | - | |
| fuse-overlayfs-0.3-5.module+el8.3.0+9668+293abd4d.src.rpm | be3f555f1a76c2233f4bf0cf2d61eb37 | - | |
| oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+9668+293abd4d.src.rpm | c4117722a4bac2473610f577940ef70a | - | |
| oci-umount-2.3.4-2.git87f9237.module+el8.3.0+9668+293abd4d.src.rpm | bfcb792bc5492921580ba034c92c9b54 | - | |
| podman-1.0.0-8.git921f98f.module+el8.3.0+9668+293abd4d.src.rpm | 47f17e81ab8381b240333ae89695d4b1 | - | |
| runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+9668+293abd4d.src.rpm | 621a5f24daac92fe5f981c53adb284fd | - | |
| skopeo-0.1.32-6.git1715c90.0.1.module+el8.3.0+9668+293abd4d.src.rpm | 9724fe7941bbc539db18030cbde49f82 | - | |
| slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+9668+293abd4d.src.rpm | 140715895161b2fb1f327abf252ed2f3 | - | |
| buildah-1.5-8.gite94b4f9.0.1.module+el8.3.0+9668+293abd4d.x86_64.rpm | 5e9bc492f2638d41c971ab121a586bb8 | - | |
| container-selinux-2.124.0-1.gitf958d0c.module+el8.3.0+9668+293abd4d.noarch.rpm | df2d17a69116fe072dc3dbbff5985b32 | - | |
| containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+9668+293abd4d.x86_64.rpm | 2a34392c49696f329295350cf0239162 | - | |
| containers-common-0.1.32-6.git1715c90.0.1.module+el8.3.0+9668+293abd4d.x86_64.rpm | 8433bd80532e5145e24bc410147a27a6 | - | |
| crit-3.12-9.module+el8.3.0+9668+293abd4d.x86_64.rpm | 7b6df29def0c35dc00505213a8ed6a77 | - | |
| criu-3.12-9.module+el8.3.0+9668+293abd4d.x86_64.rpm | eea277e4d03ddc689e2fdf0c8656f44e | - | |
| fuse-overlayfs-0.3-5.module+el8.3.0+9668+293abd4d.x86_64.rpm | 869592ceb07f059894993b3532df7238 | - | |
| oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+9668+293abd4d.x86_64.rpm | 93fb586b604efb0f70b538b1d3894171 | - | |
| oci-umount-2.3.4-2.git87f9237.module+el8.3.0+9668+293abd4d.x86_64.rpm | 747ea4bd0f902ba485b4abd464075aea | - | |
| podman-1.0.0-8.git921f98f.module+el8.3.0+9668+293abd4d.x86_64.rpm | cd2d6106e1b3b2cfa6db73cb745b5d9f | - | |
| podman-docker-1.0.0-8.git921f98f.module+el8.3.0+9668+293abd4d.noarch.rpm | ccb76de47b96555332347c114361922f | - | |
| python3-criu-3.12-9.module+el8.3.0+9668+293abd4d.x86_64.rpm | 09ddc84705369e146e5f823420ef2978 | - | |
| runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+9668+293abd4d.x86_64.rpm | c3971d783945e4adf2394ed9847eadf3 | - | |
| skopeo-0.1.32-6.git1715c90.0.1.module+el8.3.0+9668+293abd4d.x86_64.rpm | cf7616e73071ee9c02e0871abd88d0e4 | - | |
| slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+9668+293abd4d.x86_64.rpm | 3b52801cc26f06895476162c8f8e4eba | - | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
