From 79a4ab51a67482cc5e5e1cb2a74d48de063b11f8 Mon Sep 17 00:00:00 2001 From: Maxwell G Date: Jun 27 2022 20:24:11 +0000 Subject: Update to 1.1.2. Fixes rhbz#2069648. Mitigate CVE-2022-29162 / GHSA-f3fp-gc8g-vw66. Don't pull in git unnecessarily --- diff --git a/.gitignore b/.gitignore index ba3d7a5..2899833 100644 --- a/.gitignore +++ b/.gitignore @@ -357,3 +357,4 @@ /v1.1.0-rc.1.tar.gz /v1.1.0.tar.gz /v1.1.1.tar.gz +/v1.1.2.tar.gz diff --git a/runc.spec b/runc.spec index 9c2e7be..c792029 100644 --- a/runc.spec +++ b/runc.spec @@ -24,7 +24,7 @@ %global import_path %{provider_prefix} %global git0 https://github.com/opencontainers/runc -%global built_tag v1.1.1 +%global built_tag v1.1.2 %global built_tag_strip %(b=%{built_tag}; echo ${b:1}) %global gen_version %(b=%{built_tag_strip}; echo ${b/-/"~"}) @@ -49,7 +49,6 @@ BuildRequires: golang BuildRequires: pkgconfig(libseccomp) BuildRequires: go-md2man BuildRequires: make -BuildRequires: git Provides: oci-runtime # vendored libraries # awk '{print "Provides: bundled(golang("$1")) = "$2}' go.mod | sort | uniq | sed -e 's/-/_/g' -e '/bundled(golang())/d' -e '/bundled(golang(go\|module\|replace\|require))/d' @@ -89,7 +88,7 @@ in accordance with the Open Container Initiative's specifications, and to manage containers running under runc. %prep -%autosetup -Sgit -n %{name}-%{built_tag_strip} +%autosetup -p1 -n %{name}-%{built_tag_strip} sed -i 's/ -trimpath//g' Makefile %build @@ -142,6 +141,11 @@ install -p -m 0644 contrib/completions/bash/%{name} %{buildroot}%{_datadir}/bash %{_datadir}/bash-completion/completions/%{name} %changelog +* Mon Jun 27 2022 Maxwell G - 2:1.1.2-1 +- Update to 1.1.2. Fixes rhbz#2069648. +- Mitigate CVE-2022-29162 / GHSA-f3fp-gc8g-vw66. +- Don't pull in git unnecessarily + * Sat Jun 18 2022 Robert-André Mauchin - 2:1.1.1-2 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 diff --git a/sources b/sources index cde310f..dbeeac2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (v1.1.1.tar.gz) = baf622e7edae9b68d2fa255f02359d770489c7578be3c6379a5d939b4f1dfa697ec9eb4ef7dce252e64ee5225f76c06e45182a9b92b68a952e21e3f5f91450d0 +SHA512 (v1.1.2.tar.gz) = 61d8cc82f49e3bc1cf4cc4ae18a9d9c8f4ae93e8380ce6fa9034b154bd1b915339ee65babdf7518021d015a3c31545fcbad5bbf0c4579c7eb50988877121f049