packages/runc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
runc/runc.spec
Song Zhang 581d133597 runc: fix CVE-2024-45310 
Signed-off-by: Song Zhang <zhangsong34@huawei.com>
2024-09-10 21:28:03 +08:00

237 lines
5.8 KiB
RPMSpec
Raw Permalink Blame History

%global _bindir /usr/bin
Name: docker-runc
Version: 1.0.0.rc3
Release: 228
Summary: runc is a CLI tool for spawning and running containers according to the OCI specification.
License: ASL 2.0
Source: %{name}.tar.gz
Provides: runc
URL: https://www.opencontainers.org/
Vendor: OCI
Packager: OCI
BuildRequires: golang >= 1.8.3 glibc-static make libseccomp-devel libseccomp-static libselinux-devel
%description
runc is a CLI tool for spawning and running containers according to the OCI specification.
%prep
%setup -c -n runc
%install
./apply-patch
mkdir -p .gopath/src/github.com/opencontainers
export GOPATH=`pwd`/.gopath
ln -sf `pwd` .gopath/src/github.com/opencontainers/runc
cd .gopath/src/github.com/opencontainers/runc
make BUILDTAGS="seccomp selinux" static
rm -rf .gopath
install -d $RPM_BUILD_ROOT/%{_bindir}
install -p -m 755 runc $RPM_BUILD_ROOT/%{_bindir}/runc
%clean
%{__rm} -rf %{_bindir}/runc
%files
%{_bindir}/runc
%changelog
* Tue Sep 10 2024 Song Zhang<zhangsong34@huawei.com> - 1.0.0.rc3-228
- Type:CVE
- CVE:CVE-2024-45310
- SUG:NA
- DESC:fix CVE-2024-45310
* Fri Aug 30 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-227
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:format log instead panic when procError missing payload
* Thu Jul 11 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-226
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:do not support set umask through native.umask
* Mon Mar 04 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-225
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches
* Mon Feb 5 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-224
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:check cmd exist
* Thu Feb 1 2024 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-223
- Type:CVE
- CVE:CVE-2024-21626
- SUG:NA
- DESC:fix RootDir fd leaks
* Fri Dec 8 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-222
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libct: Destroy: don't proceed in case of errors
* Mon Dec 4 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-221
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:runc delete do not ignore error from destroy
* Mon Nov 27 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-220
- Type: bugfix
- CVE: NA
- SUG: NA
- DESC: create cwd when it does not exist
* Tue Nov 21 2023 zhangbowei<zhangbowei@kylinos.cn> - 1.0.0.rc3-219
- Type: bugfix
- CVE: NA
- SUG: NA
- DESC: fix the bug when runc failed to update fat container memory value
* Thu Oct 26 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-218
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix the bug when runc syscall.Exec cmd not exist cause panic
* Tue Oct 24 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-217
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches
* Mon Sep 18 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-214
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix init error return logic
* Mon Jun 25 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-213
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patch
* Tue Apr 4 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-212
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Prohibit /proc and /sys to be symlinks
* Wed Mar 29 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-211
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix tmpfs mount bug and blkio do not set bug
* Mon Feb 13 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-210
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:seccomp prepend ENOSYS stub to all filters
* Mon Feb 13 2023 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-209
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Make sure signalAllProcesses is invoked in the function of destroy when container shares pid namespace
* Sat Dec 17 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-208
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:support specify umask
* Wed Sep 28 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-207
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:move install path to /usr/bin
* Wed Sep 21 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-206
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify Makefile and add logs
* Tue Aug 9 2022 zhongjiawei<zhongjiawei1@huawei.com> - 1.0.0.rc3-205
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:change umask to 0022
* Thu Jun 03 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-204
- Type:CVE
- CVE:CVE-2022-29162
- SUG:NA
- DESC:do not set inheritable capabilities
* Fri Aug 20 2021 wangqing <wangqing@uniontech.com> - 1.0.0.rc3-203
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:provides runc
* Mon Aug 09 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-202
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix systemd cgroup after memory type changed
* Thu Jun 03 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
- Type:CVE
- CVE:CVE-2021-30465
- SUG:NA
- DESC:add mount destination validation(fix CVE-2021-30465)
* Wed Feb 9 2021 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync bugfix and bump version to 200, bugfix include
1. add cpu and memory info when print cgroup info
2. fix freezing race
* Wed Nov 25 2020 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:don't deny all devices when update cgroup resource
do not permit /proc mounts to non-directories
fix permission denied
* Fri Mar 20 2020 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-103
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:pass back the pid of runc:[1:CHILD] so we can wait on it
* Thu Mar 5 2020 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-102
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fixes config.Namespaces is empty when accessed
write freezer state after every state check
may kill other process when container has been stopped
fix cgroup hugetlb size prefix for kB
check nil pointers in cgroup manager
* Wed Jan 1 2020 xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-101
- Type:requirement
- ID:NA
- SUG:NA
- DESC:package init
Reference in New Issue View Git Blame Copy Permalink