| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: umoci | Distribution: openSUSE Tumbleweed |
| Version: 0.6.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Wed Oct 15 11:05:55 2025 |
| Group: System/Management | Build host: reproducible |
| Size: 8431196 | Source RPM: umoci-0.6.0-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://umo.ci | |
| Summary: Open Container Image manipulation tool | |
umoci modifies Open Container images. umoci is a manipulation tool for OCI images. In particular, it is a more complete alternative to oci-image-tools provided by the OCI.
Apache-2.0
* Wed Oct 15 2025 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.6.0. Upstream changelog is available from
<https://github.com/opencontainers/umoci/releases/tag/v0.6.0> bsc#1252025
* umoci now has automatic SOURCE_DATE_EPOCH support, improving the
reproducibility of generated images.
* "umoci stat" now provides more information about theimage.
* "umoci config" now supports --platform.variant (architecture variants)
which resolves issues with images on ARM (on ARM systems, "umoci new" will
auto-fill the host CPU variant).
- Remove upstreamed patches:
- 0001-oci-config-gracefully-fallback-if-etc-resolv.conf-do.patch
- Bump to Go >= 1.24.
- Switch to "%autosetup -p1".
* Mon Sep 08 2025 Aleksa Sarai <asarai@suse.com>
- Add smoke-test for "umoci --version" in %check.
* Sat Sep 06 2025 Aleksa Sarai <asarai@suse.com>
- Add %check section to run "go test".
- Add backport of <https://github.com/opencontainers/umoci/pull/617> to let "go
test" run in OBS (where /etc/resolv.conf doesn't exist).
+ 0001-oci-config-gracefully-fallback-if-etc-resolv.conf-do.patch
* Sat Sep 06 2025 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.5.1. Upstream changelog is available from
<https://github.com/opencontainers/umoci/releases/tag/v0.5.1> bsc#1249450
* For images with an empty index.json, umoci will no longer incorrectly set
the manifests entry to null.
* umoci will now produce an error for images with negative-sized descriptors,
based on recent discussions in the upstream image-spec.
* Use go:embed to fill umoci --version information from VERSION.
* Stop using oci-image-tools for integration tests, instead use some smoke
tests and the docker-library-maintained meta-scripts.
This release is dedicated to our cat Yuki who sadly passed away on Friday.
Most of the code I've written in the past four years was written with him
purring away on my chest, and he was the most loving cat I've ever met. Rest
in peace, little buddy. I hope you enjoyed your time with us, and I'll always
keep you in my heart.
* Wed May 21 2025 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.5.0. Upstream changelog is available from
<https://github.com/opencontainers/umoci/releases/tag/v0.5.0> bsc#1243388
A security flaw was found in the OCI image-spec, where it is possible to
cause a blob with one media-type to be interpreted as a different media-type.
As umoci is not a registry nor does it handle signatures, this vulnerability
had no real impact on umoci but for safety we implemented the now-recommended
media-type embedding and verification. CVE-2021-41190
Other changes in this release:
* Several large reworks and API-related changes to the umoci's overlayfs
support. This is only available to Go API users.
* The runtime-spec config.json generated by umoci is updated to be more
modern and work properly with modern runc versions.
* The default gzip compression blocksize has been adjusted to match Docker.
* zstd-compressed images are now fully supported. Users can explcitily
request the compression algorithm for newly-generated layers with the
- -compress option.
- Remove upstreamed patches:
- 0001-makefile-fix-bad-build-flags.patch
- Update umoci.keyring from upstream to include new signing keys.
* Tue Feb 20 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Mon Mar 27 2023 Frederic Crozat <fcrozat@suse.com>
- Drop explicit BuildRequires on go1.14, no longer needed.
* Tue Apr 06 2021 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.4.7. CVE-2021-29136 bsc#1184147
A security flaw was found in umoci, and has been fixed in this release. If
umoci was used to unpack a malicious image (using either umoci unpack or
umoci raw unpack) that contained a symlink entry for /., umoci would apply
subsequent layers to the target of the symlink (resolved on the host
filesystem). This means that if you ran umoci as root, a malicious image
could overwrite any file on the system (assuming you didn't have any other
access control restrictions). Thanks to Robin Peraglie from Cure53 for
discovering this bug. CVE-2021-29136
Other changes in this release:
* umoci now compiles on FreeBSD and appears to work, with the notable
limitation that it currently refuses to extract non-Linux images on any
platform (this will be fixed in a future release).
* Initial fuzzer implementations for oss-fuzz.
* umoci will now read all trailing data from image layers, to combat the
existence of some image generators that appear to append NUL bytes to the
end of the gzip stream (which would previously cause checksum failures
because we didn't read nor checksum the trailing junk bytes). However,
umoci will still not read past the descriptor length.
* umoci now ignores all overlayfs xattrs during unpack and repack
operations, to avoid causing issues when packing a raw overlayfs
directory.
* For details, see CHANGELOG.md in the package.
- Backport patch to fix KIWI which depends on umoci having sane output from
"umoci --version". <https://github.com/opencontainers/umoci/pull/369>
+ 0001-makefile-fix-bad-build-flags.patch
- Remove upstreamed patches:
- CVE-2021-29136.patch
* Thu Apr 01 2021 Aleksa Sarai <asarai@suse.com>
- Re-disable s390 builds.
* Tue Mar 30 2021 Aleksa Sarai <asarai@suse.com>
[This was only ever released in Leap and SLES.]
- Add fix for CVE-2021-29136. bsc#1184147
+ CVE-2021-29136.patch
/usr/bin/umoci /usr/share/doc/packages/umoci /usr/share/doc/packages/umoci/CHANGELOG.md /usr/share/doc/packages/umoci/README.md /usr/share/doc/packages/umoci/man /usr/share/doc/packages/umoci/man/.gitignore /usr/share/doc/packages/umoci/man/umoci-config.1 /usr/share/doc/packages/umoci/man/umoci-config.1.md /usr/share/doc/packages/umoci/man/umoci-gc.1 /usr/share/doc/packages/umoci/man/umoci-gc.1.md /usr/share/doc/packages/umoci/man/umoci-init.1 /usr/share/doc/packages/umoci/man/umoci-init.1.md /usr/share/doc/packages/umoci/man/umoci-insert.1 /usr/share/doc/packages/umoci/man/umoci-insert.1.md /usr/share/doc/packages/umoci/man/umoci-list.1 /usr/share/doc/packages/umoci/man/umoci-list.1.md /usr/share/doc/packages/umoci/man/umoci-ls.1 /usr/share/doc/packages/umoci/man/umoci-ls.1.md /usr/share/doc/packages/umoci/man/umoci-new.1 /usr/share/doc/packages/umoci/man/umoci-new.1.md /usr/share/doc/packages/umoci/man/umoci-raw-add-layer.1 /usr/share/doc/packages/umoci/man/umoci-raw-add-layer.1.md /usr/share/doc/packages/umoci/man/umoci-raw-config.1 /usr/share/doc/packages/umoci/man/umoci-raw-config.1.md /usr/share/doc/packages/umoci/man/umoci-raw-runtime-config.1 /usr/share/doc/packages/umoci/man/umoci-raw-runtime-config.1.md /usr/share/doc/packages/umoci/man/umoci-raw-unpack.1 /usr/share/doc/packages/umoci/man/umoci-raw-unpack.1.md /usr/share/doc/packages/umoci/man/umoci-raw.1 /usr/share/doc/packages/umoci/man/umoci-raw.1.md /usr/share/doc/packages/umoci/man/umoci-remove.1 /usr/share/doc/packages/umoci/man/umoci-remove.1.md /usr/share/doc/packages/umoci/man/umoci-repack.1 /usr/share/doc/packages/umoci/man/umoci-repack.1.md /usr/share/doc/packages/umoci/man/umoci-rm.1 /usr/share/doc/packages/umoci/man/umoci-rm.1.md /usr/share/doc/packages/umoci/man/umoci-stat.1 /usr/share/doc/packages/umoci/man/umoci-stat.1.md /usr/share/doc/packages/umoci/man/umoci-tag.1 /usr/share/doc/packages/umoci/man/umoci-tag.1.md /usr/share/doc/packages/umoci/man/umoci-unpack.1 /usr/share/doc/packages/umoci/man/umoci-unpack.1.md /usr/share/doc/packages/umoci/man/umoci.1 /usr/share/doc/packages/umoci/man/umoci.1.md /usr/share/doc/packages/umoci/site /usr/share/doc/packages/umoci/site/.gitignore /usr/share/doc/packages/umoci/site/_index.md /usr/share/doc/packages/umoci/site/advanced /usr/share/doc/packages/umoci/site/advanced/_index.md /usr/share/doc/packages/umoci/site/advanced/workflow-optimisation.md /usr/share/doc/packages/umoci/site/meta /usr/share/doc/packages/umoci/site/meta/_index.md /usr/share/doc/packages/umoci/site/meta/changelog.md /usr/share/doc/packages/umoci/site/meta/contributing.md /usr/share/doc/packages/umoci/site/meta/governance.md /usr/share/doc/packages/umoci/site/meta/releases.md /usr/share/doc/packages/umoci/site/quick-start /usr/share/doc/packages/umoci/site/quick-start/_index.md /usr/share/doc/packages/umoci/site/quick-start/creating-an-image.md /usr/share/doc/packages/umoci/site/quick-start/garbage-collection.md /usr/share/doc/packages/umoci/site/quick-start/getting-an-image.md /usr/share/doc/packages/umoci/site/quick-start/rootless.md /usr/share/doc/packages/umoci/site/quick-start/workflow.md /usr/share/doc/packages/umoci/site/reference /usr/share/doc/packages/umoci/site/reference/_index.md /usr/share/doc/packages/umoci/site/reference/architecture.md /usr/share/doc/packages/umoci/site/reference/roadmap.md /usr/share/doc/packages/umoci/site/reference/security.md /usr/share/licenses/umoci /usr/share/licenses/umoci/COPYING /usr/share/man/man1/umoci-config.1.gz /usr/share/man/man1/umoci-gc.1.gz /usr/share/man/man1/umoci-init.1.gz /usr/share/man/man1/umoci-insert.1.gz /usr/share/man/man1/umoci-list.1.gz /usr/share/man/man1/umoci-ls.1.gz /usr/share/man/man1/umoci-new.1.gz /usr/share/man/man1/umoci-raw-add-layer.1.gz /usr/share/man/man1/umoci-raw-config.1.gz /usr/share/man/man1/umoci-raw-runtime-config.1.gz /usr/share/man/man1/umoci-raw-unpack.1.gz /usr/share/man/man1/umoci-raw.1.gz /usr/share/man/man1/umoci-remove.1.gz /usr/share/man/man1/umoci-repack.1.gz /usr/share/man/man1/umoci-rm.1.gz /usr/share/man/man1/umoci-stat.1.gz /usr/share/man/man1/umoci-tag.1.gz /usr/share/man/man1/umoci-unpack.1.gz /usr/share/man/man1/umoci.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Oct 18 22:43:15 2025