diff --git a/crun-1.4.3.tar.xz b/crun-1.4.3.tar.xz deleted file mode 100644 index 4db42e73fbfbc5e6645585960787cab31380a3df..0000000000000000000000000000000000000000 Binary files a/crun-1.4.3.tar.xz and /dev/null differ diff --git a/crun-1.4.5.tar.xz b/crun-1.4.5.tar.xz new file mode 100644 index 0000000000000000000000000000000000000000..8bd005b1180df95b09b948575a634a1df5478b85 Binary files /dev/null and b/crun-1.4.5.tar.xz differ diff --git a/crun.spec b/crun.spec index 067dd7728d229bb6c7d486c5fb6cd47b7c2e1286..76c87eda5ade6ea3b456f1830178d1c123fcc217 100644 --- a/crun.spec +++ b/crun.spec @@ -1,10 +1,9 @@ Name: crun -Version: 1.4.3 -Release: 2 +Version: 1.4.5 +Release: 1 Summary: A fast and low-memory footprint OCI Container Runtime fully written in C. URL: https://github.com/containers/%{name} Source0: https://github.com/containers/crun/releases/download/%{version}/%{name}-%{version}.tar.xz -Patch0: fix-CVE-2022-27650.patch License: GPLv2+ and LGPLv2.1+ BuildRequires: autoconf automake gcc python BuildRequires: libcap-devel systemd-devel yajl-devel libseccomp-devel libselinux-devel @@ -43,6 +42,9 @@ rm -rf %{buildroot}%{_prefix}/lib* %{_mandir}/man1/* %changelog +* Wed Jul 20 2022 fushanqing - 1.4.5-1 +- update to 1.4.5 + * Mon May 23 2022 fushanqing - 1.4.3-2 - fix CVE-2022-27650. diff --git a/fix-CVE-2022-27650.patch b/fix-CVE-2022-27650.patch deleted file mode 100644 index 975dc9efa70913e366555f106c2021dea53a44f2..0000000000000000000000000000000000000000 --- a/fix-CVE-2022-27650.patch +++ /dev/null @@ -1,14 +0,0 @@ -diff -Naru crun-1.4.3/src/exec.c crun-1.4.3-new/src/exec.c ---- crun-1.4.3/src/exec.c 2021-11-05 14:53:28.000000000 +0800 -+++ crun-1.4.3-new/src/exec.c 2022-05-23 13:51:13.000000000 +0800 -@@ -304,8 +304,8 @@ - capabilities->effective = exec_options.cap; - capabilities->effective_len = exec_options.cap_size; - -- capabilities->inheritable = dup_array (exec_options.cap, exec_options.cap_size); -- capabilities->inheritable_len = exec_options.cap_size; -+ capabilities->inheritable = NULL; -+ capabilities->inheritable_len = 0; - - capabilities->bounding = dup_array (exec_options.cap, exec_options.cap_size); - capabilities->bounding_len = exec_options.cap_size;