packages/crun
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

!9 update to 1.4.5

Browse Source 
From: @fu-shanqing 
Reviewed-by: @yangzhao_kl 
Signed-off-by: @yangzhao_kl
This commit is contained in:
openeuler-ci-bot 2022-07-25 03:18:51 +00:00 committed by Gitee
commit 36c0f16993
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
4 changed files with 5 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
crun-1.4.3.tar.xz
View File

Binary file not shown.

BIN
crun-1.4.5.tar.xz Normal file
View File

Binary file not shown.

8
crun.spec
View File

@ -1,10 +1,9 @@
Name: crun
Version: 1.4.3
Release: 2
Version: 1.4.5
Release: 1
Summary: A fast and low-memory footprint OCI Container Runtime fully written in C.
URL: https://github.com/containers/%{name}
Source0: https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.xz
Patch0: fix-CVE-2022-27650.patch
License: GPLv2+ and LGPLv2.1+
BuildRequires: autoconf automake gcc python
BuildRequires: libcap-devel systemd-devel yajl-devel libseccomp-devel libselinux-devel
@ -43,6 +42,9 @@ rm -rf %{buildroot}%{_prefix}/lib*
%{_mandir}/man1/*
%changelog
* Wed Jul 20 2022 fushanqing <fushanqing@kylinos.cn> - 1.4.5-1
- update to 1.4.5
* Mon May 23 2022 fushanqing <fushanqing@kylinos.cn> - 1.4.3-2
- fix CVE-2022-27650.

14
fix-CVE-2022-27650.patch
View File

@ -1,14 +0,0 @@
diff -Naru crun-1.4.3/src/exec.c crun-1.4.3-new/src/exec.c
--- crun-1.4.3/src/exec.c 2021-11-05 14:53:28.000000000 +0800
+++ crun-1.4.3-new/src/exec.c 2022-05-23 13:51:13.000000000 +0800
@@ -304,8 +304,8 @@
capabilities->effective = exec_options.cap;
capabilities->effective_len = exec_options.cap_size;
- capabilities->inheritable = dup_array (exec_options.cap, exec_options.cap_size);
- capabilities->inheritable_len = exec_options.cap_size;
+ capabilities->inheritable = NULL;
+ capabilities->inheritable_len = 0;
capabilities->bounding = dup_array (exec_options.cap, exec_options.cap_size);
capabilities->bounding_len = exec_options.cap_size;