| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: umoci | Distribution: openSUSE Tumbleweed |
| Version: 0.4.7 | Vendor: openSUSE |
| Release: 4.1 | Build date: Tue Feb 20 16:41:40 2024 |
| Group: System/Management | Build host: reproducible |
| Size: 6987459 | Source RPM: umoci-0.4.7-4.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://umo.ci | |
| Summary: Open Container Image manipulation tool | |
umoci modifies Open Container images. umoci is a manipulation tool for OCI images. In particular, it is a more complete alternative to oci-image-tools provided by the OCI.
Apache-2.0
* Tue Feb 20 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Mon Mar 27 2023 Frederic Crozat <fcrozat@suse.com>
- Drop explicit BuildRequires on go1.14, no longer needed.
* Tue Apr 06 2021 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.4.7. CVE-2021-29136 bsc#1184147
A security flaw was found in umoci, and has been fixed in this release. If
umoci was used to unpack a malicious image (using either umoci unpack or
umoci raw unpack) that contained a symlink entry for /., umoci would apply
subsequent layers to the target of the symlink (resolved on the host
filesystem). This means that if you ran umoci as root, a malicious image
could overwrite any file on the system (assuming you didn't have any other
access control restrictions). Thanks to Robin Peraglie from Cure53 for
discovering this bug. CVE-2021-29136
Other changes in this release:
* umoci now compiles on FreeBSD and appears to work, with the notable
limitation that it currently refuses to extract non-Linux images on any
platform (this will be fixed in a future release).
* Initial fuzzer implementations for oss-fuzz.
* umoci will now read all trailing data from image layers, to combat the
existence of some image generators that appear to append NUL bytes to the
end of the gzip stream (which would previously cause checksum failures
because we didn't read nor checksum the trailing junk bytes). However,
umoci will still not read past the descriptor length.
* umoci now ignores all overlayfs xattrs during unpack and repack
operations, to avoid causing issues when packing a raw overlayfs
directory.
* For details, see CHANGELOG.md in the package.
- Backport patch to fix KIWI which depends on umoci having sane output from
"umoci --version". <https://github.com/opencontainers/umoci/pull/369>
+ 0001-makefile-fix-bad-build-flags.patch
- Remove upstreamed patches:
- CVE-2021-29136.patch
* Thu Apr 01 2021 Aleksa Sarai <asarai@suse.com>
- Re-disable s390 builds.
* Tue Mar 30 2021 Aleksa Sarai <asarai@suse.com>
[This was only ever released in Leap and SLES.]
- Add fix for CVE-2021-29136. bsc#1184147
+ CVE-2021-29136.patch
* Wed Jun 24 2020 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.4.6.
umoci has been adopted by the Open Container Initative as a reference
implementation of the OCI Image Specification. This will have little impact
on the roadmap or scope of umoci, but it does further solidify umoci as a
useful piece of "boring container infrastructure" that can be used to build
larger systems.
> **NOTICE**: As part of the adoption procedure, the import path and module
> name of umoci has changed from `github.com/openSUSE/umoci` to
> `github.com/opencontainers/umoci`. This means that users of our (still
> unstable) Go API will have to change their import paths in order to update
> to newer versions of umoci.
>
> The old GitHub project will contain a snapshot of `v0.4.5` with a few
> minor changes to the readme that explain the situation. Go projects which
> import import the archived project will receive build warnings that
> explain the need to update their import paths.
+ umoci now builds on MacOS, and we currently run the unit tests on MacOS to
hopefully catch core regressions (in the future we will get the
integration tests running to catch more possible regressions).
opencontainers/umoci#318
* Suppress repeated xattr warnings on destination filesystems that do not
support xattrs. opencontainers/umoci#311
* Work around a long-standing issue in our command-line parsing library (see
urfave/cli#1152) by disabling argument re-ordering for `umoci config`,
which often takes `-`-prefixed flag arguments. opencontainers/umoci#328
* For details, see CHANGELOG.md in the package.
* Tue Dec 03 2019 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.4.5.
* Use "type: bind" for generated config.json bind-mounts.
* Don't insert a new layer if there is no diff.
* Only output a warning if forbidden extended attributes are present inside
the tar archive.
* For details, see CHANGELOG.md in the package.
* Mon Mar 18 2019 <gunreben@t-online.de>
- Enable build for s390x on openSUSE
* Thu Jan 31 2019 Aleksa Sarai <asarai@suse.com>
- Update to umoci v0.4.4.
* Added full-stack verification of blob hashes and descriptors for all
operations (improving our hardening against bad images).
* For details, see CHANGELOG.md in the package.
* Sun Nov 11 2018 asarai@suse.com
- Update to umoci v0.4.3.
* Added --no-history to all commands with --history.* flags.
Should only be used for umoci-config(1).
* Added `umoci insert --tag` to allow non-destructive modifications.
* For details, see packaged /usr/share/doc/packages/umoci/CHANGELOG.md.
/usr/bin/umoci /usr/share/doc/packages/umoci /usr/share/doc/packages/umoci/CHANGELOG.md /usr/share/doc/packages/umoci/README.md /usr/share/doc/packages/umoci/man /usr/share/doc/packages/umoci/man/.gitignore /usr/share/doc/packages/umoci/man/umoci-config.1 /usr/share/doc/packages/umoci/man/umoci-config.1.md /usr/share/doc/packages/umoci/man/umoci-gc.1 /usr/share/doc/packages/umoci/man/umoci-gc.1.md /usr/share/doc/packages/umoci/man/umoci-init.1 /usr/share/doc/packages/umoci/man/umoci-init.1.md /usr/share/doc/packages/umoci/man/umoci-insert.1 /usr/share/doc/packages/umoci/man/umoci-insert.1.md /usr/share/doc/packages/umoci/man/umoci-list.1 /usr/share/doc/packages/umoci/man/umoci-list.1.md /usr/share/doc/packages/umoci/man/umoci-ls.1 /usr/share/doc/packages/umoci/man/umoci-ls.1.md /usr/share/doc/packages/umoci/man/umoci-new.1 /usr/share/doc/packages/umoci/man/umoci-new.1.md /usr/share/doc/packages/umoci/man/umoci-raw-add-layer.1 /usr/share/doc/packages/umoci/man/umoci-raw-add-layer.1.md /usr/share/doc/packages/umoci/man/umoci-raw-config.1 /usr/share/doc/packages/umoci/man/umoci-raw-config.1.md /usr/share/doc/packages/umoci/man/umoci-raw-runtime-config.1 /usr/share/doc/packages/umoci/man/umoci-raw-runtime-config.1.md /usr/share/doc/packages/umoci/man/umoci-raw-unpack.1 /usr/share/doc/packages/umoci/man/umoci-raw-unpack.1.md /usr/share/doc/packages/umoci/man/umoci-raw.1 /usr/share/doc/packages/umoci/man/umoci-raw.1.md /usr/share/doc/packages/umoci/man/umoci-remove.1 /usr/share/doc/packages/umoci/man/umoci-remove.1.md /usr/share/doc/packages/umoci/man/umoci-repack.1 /usr/share/doc/packages/umoci/man/umoci-repack.1.md /usr/share/doc/packages/umoci/man/umoci-rm.1 /usr/share/doc/packages/umoci/man/umoci-rm.1.md /usr/share/doc/packages/umoci/man/umoci-stat.1 /usr/share/doc/packages/umoci/man/umoci-stat.1.md /usr/share/doc/packages/umoci/man/umoci-tag.1 /usr/share/doc/packages/umoci/man/umoci-tag.1.md /usr/share/doc/packages/umoci/man/umoci-unpack.1 /usr/share/doc/packages/umoci/man/umoci-unpack.1.md /usr/share/doc/packages/umoci/man/umoci.1 /usr/share/doc/packages/umoci/man/umoci.1.md /usr/share/doc/packages/umoci/site /usr/share/doc/packages/umoci/site/.gitignore /usr/share/doc/packages/umoci/site/_index.md /usr/share/doc/packages/umoci/site/advanced /usr/share/doc/packages/umoci/site/advanced/_index.md /usr/share/doc/packages/umoci/site/advanced/workflow-optimisation.md /usr/share/doc/packages/umoci/site/meta /usr/share/doc/packages/umoci/site/meta/_index.md /usr/share/doc/packages/umoci/site/meta/changelog.md /usr/share/doc/packages/umoci/site/meta/contributing.md /usr/share/doc/packages/umoci/site/meta/governance.md /usr/share/doc/packages/umoci/site/meta/releases.md /usr/share/doc/packages/umoci/site/quick-start /usr/share/doc/packages/umoci/site/quick-start/_index.md /usr/share/doc/packages/umoci/site/quick-start/creating-an-image.md /usr/share/doc/packages/umoci/site/quick-start/garbage-collection.md /usr/share/doc/packages/umoci/site/quick-start/getting-an-image.md /usr/share/doc/packages/umoci/site/quick-start/rootless.md /usr/share/doc/packages/umoci/site/quick-start/workflow.md /usr/share/doc/packages/umoci/site/reference /usr/share/doc/packages/umoci/site/reference/_index.md /usr/share/doc/packages/umoci/site/reference/architecture.md /usr/share/doc/packages/umoci/site/reference/roadmap.md /usr/share/doc/packages/umoci/site/reference/security.md /usr/share/licenses/umoci /usr/share/licenses/umoci/COPYING /usr/share/man/man1/umoci-config.1.gz /usr/share/man/man1/umoci-gc.1.gz /usr/share/man/man1/umoci-init.1.gz /usr/share/man/man1/umoci-insert.1.gz /usr/share/man/man1/umoci-list.1.gz /usr/share/man/man1/umoci-ls.1.gz /usr/share/man/man1/umoci-new.1.gz /usr/share/man/man1/umoci-raw-add-layer.1.gz /usr/share/man/man1/umoci-raw-config.1.gz /usr/share/man/man1/umoci-raw-runtime-config.1.gz /usr/share/man/man1/umoci-raw-unpack.1.gz /usr/share/man/man1/umoci-raw.1.gz /usr/share/man/man1/umoci-remove.1.gz /usr/share/man/man1/umoci-repack.1.gz /usr/share/man/man1/umoci-rm.1.gz /usr/share/man/man1/umoci-stat.1.gz /usr/share/man/man1/umoci-tag.1.gz /usr/share/man/man1/umoci-unpack.1.gz /usr/share/man/man1/umoci.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 13 00:41:02 2024