commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package singularity for openSUSE:Factory checked in at 2021-11-30 23:16:05 Comparing /work/SRC/openSUSE:Factory/singularity (Old) and /work/SRC/openSUSE:Factory/.singularity.new.31177 (New) Package is "singularity" Tue Nov 30 23:16:05 2021 rev:32 rq:934731 version:3.8.5 Changes: --- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-11-11 21:39:19.533015709 +0100 +++ /work/SRC/openSUSE:Factory/.singularity.new.31177/singularity.changes 2021-12-02 02:26:52.240272055 +0100 @@ -1,0 +2,14 @@ +Tue Nov 30 13:36:54 UTC 2021 - Phil Regier + +- updated to release version 3.8.5 which fixes CVE-2021-41190 + * Building Singularity from source requires go >=1.16. We now aim +to support the two most recent stable versions of Go. This +corresponds to the Go Release Maintenance Policy + +- Bug fixes + * Sourcing a script based on PATH is now permitted, fixing a +regression introduced in 3.6.0. + * Environment variables in container definition files are +properly scoped, fixing a regression introduced in 3.8.0. + +--- @@ -4 +18 @@ -- updated to bug fix relase 3.8.4 with following fix: +- updated to bug fix release 3.8.4 with following fix: Old: singularity-3.8.4.tar.gz New: singularity-3.8.5.tar.gz Other differences: -- ++ singularity.spec ++ --- /var/tmp/diff_new_pack.qvGhT7/_old 2021-12-02 02:26:52.752270288 +0100 +++ /var/tmp/diff_new_pack.qvGhT7/_new 2021-12-02 02:26:52.756270274 +0100 @@ -23,7 +23,7 @@ License:BSD-3-Clause-LBNL Group: Productivity/Clustering/Computing Name: singularity -Version:3.8.4 +Version:3.8.5 Release:0 # https://spdx.org/licenses/BSD-3-Clause-LBNL.html URL:https://github.com/hpcng/singularity @@ -37,7 +37,7 @@ BuildRequires: fdupes BuildRequires: gcc BuildRequires: git -BuildRequires: go1.13 +BuildRequires: go1.16 BuildRequires: libuuid-devel BuildRequires: make BuildRequires: openssl-devel ++ singularity-3.8.4.tar.gz -> singularity-3.8.5.tar.gz ++ /work/SRC/openSUSE:Factory/singularity/singularity-3.8.4.tar.gz /work/SRC/openSUSE:Factory/.singularity.new.31177/singularity-3.8.5.tar.gz differ: char 5, line 1
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package singularity for openSUSE:Factory checked in at 2021-11-11 21:38:12 Comparing /work/SRC/openSUSE:Factory/singularity (Old) and /work/SRC/openSUSE:Factory/.singularity.new.1890 (New) Package is "singularity" Thu Nov 11 21:38:12 2021 rev:31 rq:930817 version:3.8.4 Changes: --- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-10-15 23:05:01.210142659 +0200 +++ /work/SRC/openSUSE:Factory/.singularity.new.1890/singularity.changes 2021-11-11 21:39:19.533015709 +0100 @@ -1,0 +2,8 @@ +Thu Nov 11 08:41:37 UTC 2021 - Christian Goll + +- updated to bug fix relase 3.8.4 with following fix: + * Fix the oras contexts to avoid hangs upon failed pushes to +Harbor registry. + + +--- Old: singularity-3.8.3.tar.gz New: singularity-3.8.4.tar.gz Other differences: -- ++ singularity.spec ++ --- /var/tmp/diff_new_pack.SlCyGx/_old 2021-11-11 21:39:20.117016135 +0100 +++ /var/tmp/diff_new_pack.SlCyGx/_new 2021-11-11 21:39:20.121016138 +0100 @@ -23,7 +23,7 @@ License:BSD-3-Clause-LBNL Group: Productivity/Clustering/Computing Name: singularity -Version:3.8.3 +Version:3.8.4 Release:0 # https://spdx.org/licenses/BSD-3-Clause-LBNL.html URL:https://github.com/hpcng/singularity ++ singularity-3.8.3.tar.gz -> singularity-3.8.4.tar.gz ++ /work/SRC/openSUSE:Factory/singularity/singularity-3.8.3.tar.gz /work/SRC/openSUSE:Factory/.singularity.new.1890/singularity-3.8.4.tar.gz differ: char 5, line 1
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package singularity for openSUSE:Factory
checked in at 2021-10-15 23:04:27
Comparing /work/SRC/openSUSE:Factory/singularity (Old)
and /work/SRC/openSUSE:Factory/.singularity.new.1890 (New)
Package is "singularity"
Fri Oct 15 23:04:27 2021 rev:30 rq:925524 version:3.8.3
Changes:
--- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-10-11
15:31:32.782838150 +0200
+++ /work/SRC/openSUSE:Factory/.singularity.new.1890/singularity.changes
2021-10-15 23:05:01.210142659 +0200
@@ -1,0 +2,6 @@
+Fri Oct 15 12:16:57 UTC 2021 - Christian Goll
+
+- build requires libseccomp-devel (boo#1191697)
+- fix sysuser file name
+
+---
Other differences:
--
++ singularity.spec ++
--- /var/tmp/diff_new_pack.5Wa8rN/_old 2021-10-15 23:05:01.670142987 +0200
+++ /var/tmp/diff_new_pack.5Wa8rN/_new 2021-10-15 23:05:01.674142990 +0200
@@ -45,6 +45,7 @@
%ifarch aarch64
BuildRequires: binutils-gold
%endif
+BuildRequires: libseccomp-devel
Requires: squashfs
PreReq: permissions
@@ -111,9 +112,9 @@
done
done
-echo "g %name -" > system-user-%{name}.conf
-%sysusers_generate_pre system-user-%{name}.conf %{name}
system-user-%{name}.conf
-install -D -m 644 system-user-%{name}.conf
%{buildroot}%{_sysusersdir}/system-user-%{name}.conf
+echo "g %name -" > system-group-%{name}.conf
+%sysusers_generate_pre system-group-%{name}.conf %{name}
system-group-%{name}.conf
+install -D -m 644 system-group-%{name}.conf
%{buildroot}%{_sysusersdir}/system-group-%{name}.conf
%fdupes -s .tmp
mv .tmp/* .
@@ -163,6 +164,6 @@
%dir %{_localstatedir}/lib/singularity/mnt
%dir %{_localstatedir}/lib/singularity/mnt/session
%{_mandir}/man1/*
-%{_sysusersdir}/system-user-%{name}.conf
+%{_sysusersdir}/system-group-%{name}.conf
%changelog
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package singularity for openSUSE:Factory
checked in at 2021-10-11 15:30:53
Comparing /work/SRC/openSUSE:Factory/singularity (Old)
and /work/SRC/openSUSE:Factory/.singularity.new.2443 (New)
Package is "singularity"
Mon Oct 11 15:30:53 2021 rev:29 rq:923038 version:3.8.3
Changes:
--- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-10-01
22:29:40.365442698 +0200
+++ /work/SRC/openSUSE:Factory/.singularity.new.2443/singularity.changes
2021-10-11 15:31:32.782838150 +0200
@@ -9,0 +10,5 @@
+Thu Sep 30 09:08:22 UTC 2021 - Egbert Eich
+
+- Utilize sysuser infrastructure to set group singularity.
+
+---
Other differences:
--
++ singularity.spec ++
--- /var/tmp/diff_new_pack.igLMIf/_old 2021-10-11 15:31:33.198838817 +0200
+++ /var/tmp/diff_new_pack.igLMIf/_new 2021-10-11 15:31:33.202838824 +0200
@@ -41,6 +41,7 @@
BuildRequires: libuuid-devel
BuildRequires: make
BuildRequires: openssl-devel
+BuildRequires: sysuser-tools
%ifarch aarch64
BuildRequires: binutils-gold
%endif
@@ -109,13 +110,16 @@
fi
done
done
+
+echo "g %name -" > system-user-%{name}.conf
+%sysusers_generate_pre system-user-%{name}.conf %{name}
system-user-%{name}.conf
+install -D -m 644 system-user-%{name}.conf
%{buildroot}%{_sysusersdir}/system-user-%{name}.conf
+
%fdupes -s .tmp
mv .tmp/* .
rmdir .tmp
-%pre
-getent group singularity >/dev/null || groupadd -r singularity
-exit 0
+%pre -f %{name}.pre
%post
%set_permissions %{_libexecdir}/singularity/bin/starter-suid
@@ -159,5 +163,6 @@
%dir %{_localstatedir}/lib/singularity/mnt
%dir %{_localstatedir}/lib/singularity/mnt/session
%{_mandir}/man1/*
+%{_sysusersdir}/system-user-%{name}.conf
%changelog
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package singularity for openSUSE:Factory
checked in at 2021-10-01 22:29:10
Comparing /work/SRC/openSUSE:Factory/singularity (Old)
and /work/SRC/openSUSE:Factory/.singularity.new.2443 (New)
Package is "singularity"
Fri Oct 1 22:29:10 2021 rev:28 rq:922563 version:3.8.3
Changes:
--- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-09-13
16:25:35.510818284 +0200
+++ /work/SRC/openSUSE:Factory/.singularity.new.2443/singularity.changes
2021-10-01 22:29:40.365442698 +0200
@@ -1,0 +2,8 @@
+Fri Oct 1 13:09:02 UTC 2021 - Christian Goll
+
+- added example definitions for SLE12-SP5 and SLE15-SP3
+ * added files:
+ SLE-12SP5.def
+ SLE-15SP3.def
+
+---
New:
SLE-12SP5.def
SLE-15SP3.def
Other differences:
--
++ singularity.spec ++
--- /var/tmp/diff_new_pack.tguuHT/_old 2021-10-01 22:29:40.817443533 +0200
+++ /var/tmp/diff_new_pack.tguuHT/_new 2021-10-01 22:29:40.821443540 +0200
@@ -29,6 +29,8 @@
URL:https://github.com/hpcng/singularity
Source0:
https://github.com/hpcng/singularity/releases/download/v%{version}/singularity-%{version}.tar.gz
Source1:README.SUSE
+Source2:SLE-12SP5.def
+Source3:SLE-15SP3.def
Source5:%{name}-rpmlintrc
Patch1: useful_error_message.patch
BuildRequires: cryptsetup
@@ -56,7 +58,7 @@
%prep
%setup -q -n gopath/%{singgopath} -c
-cp %{S:1} .
+cp %{S:1} %{S:2} %{S:3} .
mv %{name}-%{version} %{name}
cd %{_builddir}/gopath
pwd
@@ -128,6 +130,8 @@
%doc singularity/CHANGELOG.md
%doc singularity/CONTRIBUTORS.md
%doc %{basename:%{S:1}}
+%doc %{basename:%{S:2}}
+%doc %{basename:%{S:3}}
%license singularity/LICENSE-LBNL.md
%license singularity/COPYRIGHT.md
%license singularity/LICENSE.md
++ README.SUSE ++
--- /var/tmp/diff_new_pack.tguuHT/_old 2021-10-01 22:29:40.857443607 +0200
+++ /var/tmp/diff_new_pack.tguuHT/_new 2021-10-01 22:29:40.857443607 +0200
@@ -64,8 +64,13 @@
spaces. Example:
SLEModules:
sle-module-basesystem,sle-module-server-applications,sle-module-web-scripting,sle-module-hpc
+Examples
+
+Example defintions for SLE12-SP5 and SLE15-SP3 are in the same
+directory as README.SUSE
+
ProductPGP
-==
+==
SLEpgp: -BEGIN PGP PUBLIC KEY BLOCK-\n\
Version: rpm-4.11.2 (NSS-3)\n\
\n\
++ SLE-12SP5.def ++
BootStrap: zypper
OSVersion: 12.5
Include: zypper
Product: SLE-HPC/12.5/x86_64
User: EMAIL
Regcode: REGCODE
Modules: \n\
sle-module-hpc/12/x86_64,\n\
sle-module-web-scripting/12/x86_64,\n\
sle-module-legacy/12/x86_64,\n\
sle-sdk/12.5/x86_64,\n\
sle-module-toolchain/12/x86_64
ProductPGP:\n\
SLEpgp: -BEGIN PGP PUBLIC KEY BLOCK-\n\
Version: rpm-4.11.2 (NSS-3)\n\
\n\
mQENBFEKlmsBCADbpZZbbSC5Zi+HxCR/ynYsVxU5JNNiSSZabN5GMgc9Z0hxeXxp\n\
YWvFoE/4n0+IXIsp83iKvxf06Eu8je/DXp0lMqDZu7WiT3XXAlkOPSNV4akHTDoY\n\
91SJaZCpgUJ7K1QXOPABNbREsAMN1a7rxBowjNjBUyiTJ2YuvQRLtGdK1kExsVma\n\
hieh/QxpoDyYd5w/aky3z23erCoEd+OPfAqEHd5tQIa6LOosa63BSCEl3milJ7J9\n\
vDmoGPAoS6ui7S2R5X4/+PLN8Mm2kOBrFjhmL93LX0mrGCMxsNsKgP6zabYKQEb8\n\
L028SXvl7EGoA+Vw5Vd3wIGbM73PfbgNrXjfABEBAAG0KFN1U0UgUGFja2FnZSBT\n\
aWduaW5nIEtleSA8YnVpbGRAc3VzZS5kZT6JATwEEwECACYCGwMGCwkIBwMCBBUC\n\
CAMEFgIDAQIeAQIXgAUCWEfrHwUJDsIitAAKCRBwr56BOdt8gpqUB/wPSSS5BcDu\n\
Oi4n02cj4Hdt7WITKBjjo0lG1fXG1ppx1wOST+s8FertMVFY53TW6FGjcYtwVOIq\n\
rsMYiV6kf1NxUV/jcAy7VmC5EZnO0R/D3sT4Oh5hsLtERauZolK5BZmd0S51Qa8e\n\
TxZ5mX9PL2i3s/ShETc30drf83ugc7B4yZPNQWXNDPgGcC+hEeC5qw48RzHYIpUt\n\
RzHmefR5Z3ioTUbDlzy+SGP2uA7mhR4Lfk/df5fYxWfCoKlyGjtrvA65cB+Pksyn\n\
xrAeBuB+vBM+KnDrxW2Sn4AbWkzH//dfz9OJDJu4UM91hb7qxM0OkrXHQV3iNqzg\n\
MDEhky/9NqMy\n\
=GdP5\n\
-END PGP PUBLIC KEY BLOCK-
%post
ln -s /etc/products.d/SLE-HPC.prod /etc/products.d/baseproduct
SUSEConnect -p PackageHub/12.5/x86_64
zypper install -y bash coreutils e2fsprogs \
ethtool filesystem findutils gawk grep \
iputils iproute2 net-tools nfs-client pam psmisc rsync sed \
rsyslog util-linux words wicked tar less \
gzip which util-linux \
pciutils vim strace sudo syslinux tcpdump timezone chrony cpio \
wget openssh
# up to here, its a base container, line below can be used
# used for warewulf
zypper install -y ipmitool kernel-default
systemctl enable sshd
++ SLE-15SP3.def ++
BootStrap: zypper
OSVersion: 15.3
Include: zypper
Product: SLES/15.3/x86_64
User: EMAIL
Regcode: REGCODE
MirrorURL: https://updates.suse.com/SUSE/Products/SLE-BCI/15-SP3/x86_64/product/
# Just base modules here, other modules are installed in post
Modules: \n\
sle-module
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package singularity for openSUSE:Factory
checked in at 2021-09-13 16:24:37
Comparing /work/SRC/openSUSE:Factory/singularity (Old)
and /work/SRC/openSUSE:Factory/.singularity.new.1899 (New)
Package is "singularity"
Mon Sep 13 16:24:37 2021 rev:27 rq:918668 version:3.8.3
Changes:
--- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-06-04
22:44:41.771222334 +0200
+++ /work/SRC/openSUSE:Factory/.singularity.new.1899/singularity.changes
2021-09-13 16:25:35.510818284 +0200
@@ -1,0 +2,53 @@
+Mon Sep 13 08:47:48 UTC 2021 - Christian Goll
+
+- Updated to version 3.8.3 which fixes regression introduced in 3.8.1 that
+ caused bind mounts without a destination to be added twice.
+
+---
+Mon Sep 6 13:12:00 UTC 2021 - Christian Goll
+
+- update to version 3.8.2
+- New features:
+ * A new overlay command allows creation and addition of writable overlays.
+ * Administrators can allow named users/groups to use specific CNI network
+configurations. Managed by directives in singularity.conf.
+ * The build command now honors --nv, --rocm, and --bind flags, permitting
+builds that require GPU access or files bound in from the host.
+ * A library service hostname can be specified as the first component of a
+library:// URL.
+- Bug fixes:
+
+ * Respect http proxy server environment variables in key operations.
+ * When pushing SIF images to oras:// endpoints, work around Harbor & GitLab
+failure to accept the SifConfigMediaType.
+ * Avoid a setfsuid compilation warning on some gcc versions.
+ * Fix a crash when silent/quiet log levels used on pulls from shub:// and
+http(s):// URIs.
+ * Wait for dm device to appear when mounting an encrypted container rootfs.
+ * Accommodate ppc64le pageSize in TestCgroups and disable -race.
+ * Allow escaped \$ in a SINGULARITYENV_ var to set a literal $ in a container
+env var. Also allow escaped commas and colons in the source bind path.
+ * Handle absolute symlinks correctly in multi-stage build %copy from blocks.
+ * Fix incorrect reference in sandbox restrictive permissions warning.
+ * Prevent garbage collection from closing the container image file
descriptor.
+ * Update to Arch Linux pacman.conf URL and remove file size verification.
+ * Avoid panic when mountinfo line has a blank field.
+ * Fix regression when files sourced from %environment contain \ escaped shell
+builtins (fixes issue with source of conda profile.d script).
+ * singularity delete will use the correct library service when the hostname
+is specified in the library:// URI.
+ * singularity build will use the correct library service when the hostname is
+specified in the library:// URI / definition file.
+ * When destination is ommitted in %files entry in definition file, ensure
+globbed files are copied to correct resolved path.
+ * Return an error if --tokenfile used for remote login to an OCI registry, as
+this is not supported.
+ * Ensure repeated remote login to same URI does not create duplicate entries
+in ~/.singularity/remote.yaml.
+ * Properly escape single quotes in Docker CMD / ENTRYPOINT translation.
+ * Updated the modified golang-x-crypto module with the latest upstream
version.
+
+
+
+
+---
Old:
singularity-3.7.4.tar.gz
New:
singularity-3.8.3.tar.gz
Other differences:
--
++ singularity.spec ++
--- /var/tmp/diff_new_pack.3AnvNn/_old 2021-09-13 16:25:35.946818788 +0200
+++ /var/tmp/diff_new_pack.3AnvNn/_new 2021-09-13 16:25:35.946818788 +0200
@@ -23,7 +23,7 @@
License:BSD-3-Clause-LBNL
Group: Productivity/Clustering/Computing
Name: singularity
-Version:3.7.4
+Version:3.8.3
Release:0
# https://spdx.org/licenses/BSD-3-Clause-LBNL.html
URL:https://github.com/hpcng/singularity
@@ -56,14 +56,15 @@
%prep
%setup -q -n gopath/%{singgopath} -c
-%patch1 -p 4
cp %{S:1} .
+mv %{name}-%{version} %{name}
+cd %{_builddir}/gopath
+pwd
+ls
+%patch1 -p1
%build
-export GOPATH=$PWD/gopath
-export PATH=$GOPATH/bin:$PATH
cd %{name}
-
# Not all of these parameters currently have an effect, but they might be
# used someday. They are the same parameters as in the configure macro.
./mconfig -V %{version}-%{release} \
++ singularity-3.7.4.tar.gz -> singularity-3.8.3.tar.gz ++
/work/SRC/openSUSE:Factory/singularity/singularity-3.7.4.tar.gz
/work/SRC/openSUSE:Factory/.singularity.new.1899/singularity-3.8.3.tar.gz
differ: char 5, line 1
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package singularity for openSUSE:Factory
checked in at 2021-06-04 22:44:18
Comparing /work/SRC/openSUSE:Factory/singularity (Old)
and /work/SRC/openSUSE:Factory/.singularity.new.1898 (New)
Package is "singularity"
Fri Jun 4 22:44:18 2021 rev:26 rq:897437 version:3.7.4
Changes:
--- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-06-01
10:35:58.272660786 +0200
+++ /work/SRC/openSUSE:Factory/.singularity.new.1898/singularity.changes
2021-06-04 22:44:41.771222334 +0200
@@ -1,0 +2,16 @@
+Fri Jun 4 11:35:15 UTC 2021 - Christian Goll
+
+- Update to version 3.7.4 (boo#1186619)
+ Fix for CVE-2021-32635:
+ Due to incorrect use of a default URL, singularity action commands
+ (run/shell/exec) specifying a container using a library:// URI will always
+ attempt to retrieve the container from the default remote endpoint
+ (cloud.sylabs.io) rather than the configured remote endpoint. An attacker may
+ be able to push a malicious container to the default remote endpoint with a
+ URI that is identical to the URI used by a victim with a non-default remote
+ endpoint, thus executing the malicious container.
+- Disabled ppc64le builds as these are non pie builds and so not
+ suiteable for the distribution in SLE and ppc64le is not relevant
+ for openSUSE
+
+---
Old:
singularity-3.7.3.tar.gz
New:
singularity-3.7.4.tar.gz
Other differences:
--
++ singularity.spec ++
--- /var/tmp/diff_new_pack.aibcRx/_old 2021-06-04 22:44:42.239223284 +0200
+++ /var/tmp/diff_new_pack.aibcRx/_new 2021-06-04 22:44:42.243223292 +0200
@@ -23,7 +23,7 @@
License:BSD-3-Clause-LBNL
Group: Productivity/Clustering/Computing
Name: singularity
-Version:3.7.3
+Version:3.7.4
Release:0
# https://spdx.org/licenses/BSD-3-Clause-LBNL.html
URL:https://github.com/hpcng/singularity
@@ -45,8 +45,8 @@
Requires: squashfs
PreReq: permissions
-# there's no golang for ppc64, just ppc64le
-ExcludeArch:ppc64
+# there's no golang for ppc64, ppc64le does not have non pie builds
+ExcludeArch:ppc64 ppc64le
Provides: %{name}-runtime
@@ -54,7 +54,6 @@
Singularity provides functionality to make portable
containers that can be used across host environments.
-
%prep
%setup -q -n gopath/%{singgopath} -c
%patch1 -p 4
++ singularity-3.7.3.tar.gz -> singularity-3.7.4.tar.gz ++
/work/SRC/openSUSE:Factory/singularity/singularity-3.7.3.tar.gz
/work/SRC/openSUSE:Factory/.singularity.new.1898/singularity-3.7.4.tar.gz
differ: char 5, line 1
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package singularity for openSUSE:Factory checked in at 2021-06-01 10:35:24 Comparing /work/SRC/openSUSE:Factory/singularity (Old) and /work/SRC/openSUSE:Factory/.singularity.new.1898 (New) Package is "singularity" Tue Jun 1 10:35:24 2021 rev:25 rq:895298 version:3.7.3 Changes: --- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-03-12 13:33:55.186376333 +0100 +++ /work/SRC/openSUSE:Factory/.singularity.new.1898/singularity.changes 2021-06-01 10:35:58.272660786 +0200 @@ -1,0 +2,9 @@ +Wed May 19 18:52:51 UTC 2021 - Ferdinand Thiessen + +- Update to version 3.7.3 + Fix for CVE-2021-29136: + A dependency used to extract docker/OCI image layers can be + tricked into modifying host files by creating a malicious layer + that has a symlink with the name "." (or "/"), when running as root. + +--- Old: singularity-3.7.2.tar.gz New: singularity-3.7.3.tar.gz Other differences: -- ++ singularity.spec ++ --- /var/tmp/diff_new_pack.SW8gvy/_old 2021-06-01 10:35:58.728661564 +0200 +++ /var/tmp/diff_new_pack.SW8gvy/_new 2021-06-01 10:35:58.732661570 +0200 @@ -23,7 +23,7 @@ License:BSD-3-Clause-LBNL Group: Productivity/Clustering/Computing Name: singularity -Version:3.7.2 +Version:3.7.3 Release:0 # https://spdx.org/licenses/BSD-3-Clause-LBNL.html URL:https://github.com/hpcng/singularity ++ singularity-3.7.2.tar.gz -> singularity-3.7.3.tar.gz ++ /work/SRC/openSUSE:Factory/singularity/singularity-3.7.2.tar.gz /work/SRC/openSUSE:Factory/.singularity.new.1898/singularity-3.7.3.tar.gz differ: char 12, line 1
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package singularity for openSUSE:Factory checked in at 2021-03-12 13:33:49 Comparing /work/SRC/openSUSE:Factory/singularity (Old) and /work/SRC/openSUSE:Factory/.singularity.new.2401 (New) Package is "singularity" Fri Mar 12 13:33:49 2021 rev:24 rq:878518 version:3.7.2 Changes: --- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-02-22 14:41:08.984670180 +0100 +++ /work/SRC/openSUSE:Factory/.singularity.new.2401/singularity.changes 2021-03-12 13:33:55.186376333 +0100 @@ -1,0 +2,13 @@ +Fri Mar 12 10:00:35 UTC 2021 - Ana Guerrero Lopez + +- New version 3.7.2 + - Bug Fixes +- Fix progress bar display when source image size is unknown. +- Fix a memory usage / leak issue when building from an existing + image file. +- Fix to allow use of ``--library`` flag to point push/pull at + default cloud library when another remote is in use. +- Address false positive loop test errors, and an e2e test registry + setup issue. + +--- Old: singularity-3.7.1.tar.gz New: singularity-3.7.2.tar.gz Other differences: -- ++ singularity.spec ++ --- /var/tmp/diff_new_pack.vZT1bp/_old 2021-03-12 13:33:55.610376927 +0100 +++ /var/tmp/diff_new_pack.vZT1bp/_new 2021-03-12 13:33:55.614376933 +0100 @@ -23,7 +23,7 @@ License:BSD-3-Clause-LBNL Group: Productivity/Clustering/Computing Name: singularity -Version:3.7.1 +Version:3.7.2 Release:0 # https://spdx.org/licenses/BSD-3-Clause-LBNL.html URL:https://github.com/hpcng/singularity ++ singularity-3.7.1.tar.gz -> singularity-3.7.2.tar.gz ++ 43457 lines of diff (skipped)
commit singularity for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package singularity for openSUSE:Factory checked in at 2021-02-22 14:40:49 Comparing /work/SRC/openSUSE:Factory/singularity (Old) and /work/SRC/openSUSE:Factory/.singularity.new.2378 (New) Package is "singularity" Mon Feb 22 14:40:49 2021 rev:23 rq:874264 version:3.7.1 Changes: --- /work/SRC/openSUSE:Factory/singularity/singularity.changes 2021-01-06 19:57:36.657234136 +0100 +++ /work/SRC/openSUSE:Factory/.singularity.new.2378/singularity.changes 2021-02-22 14:41:08.984670180 +0100 @@ -1,0 +2,16 @@ +Mon Feb 22 08:13:13 UTC 2021 - Ana Guerrero Lopez + +- New version 3.7.1 + - Bug Fixes +- Accommodate /sys/fs/selinux mount changes on kernel 5.9+. +- Fix loop devices file descriptor leak when shared loop devices + is enabled. +- Use MaxLoopDevices variable from config file in all appropriate + locations. +- Use -buildmode=default (non pie) on ppc64le to prevent crashes + when using plugins. +- Remove spurious warning in parseTokenSection() +- e2e test fixes for new kernels, new unsquashfs version. +- Show correct web URI for detached builds against alternate remotes. + +--- Old: singularity-3.7.0.tar.gz New: singularity-3.7.1.tar.gz Other differences: -- ++ singularity.spec ++ --- /var/tmp/diff_new_pack.9wQ1zh/_old 2021-02-22 14:41:09.508670761 +0100 +++ /var/tmp/diff_new_pack.9wQ1zh/_new 2021-02-22 14:41:09.508670761 +0100 @@ -23,7 +23,7 @@ License:BSD-3-Clause-LBNL Group: Productivity/Clustering/Computing Name: singularity -Version:3.7.0 +Version:3.7.1 Release:0 # https://spdx.org/licenses/BSD-3-Clause-LBNL.html URL:https://github.com/hpcng/singularity ++ singularity-3.7.0.tar.gz -> singularity-3.7.1.tar.gz ++ 14593 lines of diff (skipped)
