openSUSE-RU-2020:1466-1: moderate: Recommended update for charliecloud
openSUSE Recommended Update: Recommended update for charliecloud ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:1466-1 Rating: moderate References: Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for charliecloud fixes the following issues: Update to version 0.18 - Fixes an important symlink handling bug in ch-tug and ch-grow. Prior to version 0.18, if a pulled image contained a symlink in one layer and then a regular file at the same path in a subsequent layer, the *target* of the symlink would be overwritten even if it was not within the image; i.e., unpacking inappropriately followed the symlink. This allows a crafted image to overwrite any file writeable by the invoking user. Because Charliecloud is unprivileged, other files on the system, e.g. system files, are unaffected. - ch-grow: --version and --help work w/o dependencies installed new switch --list to list images now gives diagnostics for syntax errors and unsupported instructions WORKDIR now supports relative paths (#786) no longer crashes if input doesn’t end in newline (#474) - miscellaneous bug fixes and improvements - Full changelogs at https://groups.io/g/charliecloud/message/104 and https://groups.io/g/charliecloud/message/105 Update to version 0.16 - ch-grow and ch-tug: updates to work with external repositories - ch-grow: COPY semantics now match Docker - miscellaneous bug fixes and improvements - Full changelog at https://groups.io/g/charliecloud/message/103 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1466=1 Package List: - openSUSE Leap 15.2 (noarch): charliecloud-doc-0.18-lp152.2.3.1 charliecloud-examples-0.18-lp152.2.3.1 - openSUSE Leap 15.2 (x86_64): charliecloud-0.18-lp152.2.3.1 charliecloud-debuginfo-0.18-lp152.2.3.1 charliecloud-debugsource-0.18-lp152.2.3.1 References:
participants (1)
-
maintenance@opensuse.org