Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package docker for openSUSE:Factory checked in at 2021-02-16 22:36:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/docker (Old) and /work/SRC/openSUSE:Factory/.docker.new.28504 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "docker" Tue Feb 16 22:36:12 2021 rev:110 rq:872225 version:20.10.3_ce Changes: -------- --- /work/SRC/openSUSE:Factory/docker/docker.changes 2021-02-04 20:23:35.502782187 +0100 +++ /work/SRC/openSUSE:Factory/.docker.new.28504/docker.changes 2021-02-16 22:41:32.622042551 +0100 @@ -1,0 +2,28 @@ +Sun Feb 14 06:33:16 UTC 2021 - Aleksa Sarai <asa...@suse.com> + +[NOTE: This update was only ever released in SLES and Leap.] + +- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop + the patch entirely. bsc#1180401 bsc#1182168 + - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch + +------------------------------------------------------------------- +Wed Feb 10 07:40:36 UTC 2021 - Aleksa Sarai <asa...@suse.com> + +- Fix incorrect cast in SUSE secrets patches causing warnings on SLES. + * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch + +------------------------------------------------------------------- +Sat Feb 6 12:36:42 UTC 2021 - Aleksa Sarai <asa...@suse.com> + +[NOTE: This update was only ever released in SLES and Leap.] + +- Update Docker to 19.03.15-ce. See upstream changelog in the packaged + /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for + bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285). +- Rebase patches: + * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch +- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE. + It appears that SLES doesn't like the patch. bsc#1180401 + +------------------------------------------------------------------- @@ -5 +33,2 @@ - /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-21285 CVE-2021-21284 + /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732 + (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285). @@ -145 +174 @@ - /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 + /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch ++++++ --- /var/tmp/diff_new_pack.siCVcu/_old 2021-02-16 22:41:33.506043611 +0100 +++ /var/tmp/diff_new_pack.siCVcu/_new 2021-02-16 22:41:33.506043611 +0100 @@ -1,4 +1,4 @@ -From b7419429d17675d8db949bd7c35812308684254a Mon Sep 17 00:00:00 2001 +From eaedebbcf735732c00e565ff6077f4374cc87519 Mon Sep 17 00:00:00 2001 From: Aleksa Sarai <asa...@suse.de> Date: Wed, 8 Mar 2017 11:43:29 +1100 Subject: [PATCH 2/4] SECRETS: SUSE: implement SUSE container secrets @@ -36,7 +36,7 @@ return errdefs.System(err) diff --git a/daemon/suse_secrets.go b/daemon/suse_secrets.go new file mode 100644 -index 000000000000..177efcb22295 +index 000000000000..9ee33adf7497 --- /dev/null +++ b/daemon/suse_secrets.go @@ -0,0 +1,410 @@ @@ -68,6 +68,7 @@ + "os" + "path/filepath" + "strings" ++ "syscall" + + "github.com/docker/docker/container" + "github.com/docker/docker/pkg/archive" @@ -79,7 +80,6 @@ + + "github.com/opencontainers/go-digest" + "github.com/sirupsen/logrus" -+ "golang.org/x/sys/unix" +) + +func init() { @@ -285,7 +285,7 @@ + } + + var uid, gid int -+ if stat, ok := fi.Sys().(*unix.Stat_t); ok { ++ if stat, ok := fi.Sys().(*syscall.Stat_t); ok { + uid, gid = int(stat.Uid), int(stat.Gid) + } else { + logrus.Warnf("SUSE:secrets :: failed to cast file stat_t: defaulting to owned by root:root: %s", path)