Changelog for containerd-1.7.22-150600.188.2.x86_64.rpm :

* Wed Sep 11 2024 asaraiAATTsuse.com- Update to containerd v1.7.22. Upstream release notes: - Bump minimum Go version to 1.22.- Rebase patches:
* 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
* Thu Sep 05 2024 asaraiAATTsuse.com- Update to containerd v1.7.21. Upstream release notes: Fixes CVE-2023-47108. bsc#1217070 Fixes CVE-2023-45142. bsc#1228553- Rebase patches:
* 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
* Mon Jun 24 2024 dcermakAATTsuse.com- Revert noarch for devel subpackage for SLE 15 Switching to noarch causes issues on SLES maintenance updates, reverting it fixes our image builds
* Wed May 22 2024 asaraiAATTsuse.com- Update to containerd v1.7.17. Upstream release notes: - Switch back to using tar_scm service. Aside from obs_scm using more bandwidth and storage than a locally-compressed tar.xz, it seems there\'s some weird issue with paths in obscpio that break our SLE-12-only patch.- Rebase patches:
* 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch- Update to containerd v1.7.16. Upstream release notes: CVE-2023-45288 bsc#1221400
* Sun Apr 21 2024 eyadlorenzoAATTgmail.com- Use obs_scm service instead of tar_scm- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch (merged upstream at )- Update to containerd v1.7.15. Upstream release notes: - Update to containerd v1.7.14. Upstream release notes: - Update to containerd v1.7.13. Upstream release notes: - Update to containerd v1.7.12. Upstream release notes: - Update to containerd v1.7.11. Upstream release notes: GHSA-jq35-85cj-fj4p bsc#1224323
* Mon Feb 26 2024 dimstarAATTopensuse.org- Use %patch -P N instead of deprecated %patchN.
* Mon Jan 15 2024 dcermakAATTsuse.com- Enable manpage generation- Make devel package noarch- adjust rpmlint filters
* Mon Jan 08 2024 danish.prakashAATTsuse.com- Add patch for bsc#1217952: + 0002-shim-Create-pid-file-with-0644-permissions.patch
* Mon Dec 04 2023 asaraiAATTsuse.com- Update to containerd v1.7.10. Upstream release notes: - Rebase patches:
* 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
* Fri Oct 27 2023 asaraiAATTsuse.com- Update to containerd v1.7.8. Upstream release notes: Includes fixes for: - CVE-2022-1996 bsc#1200528- Rebase patches:
* 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
* Fri Oct 13 2023 asaraiAATTsuse.com- Update to containerd v1.7.7. Upstream release notes: - Add patch to fix build on SLE-12: + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
* Thu Sep 14 2023 asaraiAATTsuse.com- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes: bsc#1215323
* Thu Aug 31 2023 priyanka.sagguAATTsuse.com- Add `Provides: cri-runtime` to use containerd as container runtime in Factory Kubernetes packages
* Sun May 21 2023 asaraiAATTsuse.com- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes: bsc#1211578- Require a minimum Go version explicitly rather than using golang(API). Fixes the change for bsc#1210298.
* Thu May 04 2023 meissnerAATTsuse.com[ This was only released in SLE. ]- unversion to golang requires to always use the current default go. (bsc#1210298)
* Tue Apr 18 2023 asaraiAATTsuse.com- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
* Wed Mar 29 2023 asaraiAATTsuse.com- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes: Includes fixes for: - CVE-2023-25153 bsc#1208423 - CVE-2023-25173 bsc#1208426
* Wed Mar 01 2023 asaraiAATTsuse.com- Re-build containerd to use updated golang-packaging. jsc#1342
* Thu Feb 09 2023 asaraiAATTsuse.com- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
* Thu Dec 08 2022 asaraiAATTsuse.com- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream release notes:
* Tue Dec 06 2022 asaraiAATTsuse.com- Update to containerd v1.6.11. Upstream release notes:
* Tue Dec 06 2022 asaraiAATTsuse.com- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
* Tue Nov 29 2022 dmuellerAATTsuse.com- add devel subpackage, which is needed by open-vm-tools
* Tue Jun 07 2022 asaraiAATTsuse.com- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements of Docker v20.10.17-ce. bsc#1200145- Remove upstreamed patches: - bsc1200145-Limit-the-response-size-of-ExecSync.patch
* Mon Jun 06 2022 asaraiAATTsuse.com[ This patch was only released in SLES and Leap. ]- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145 + bsc1200145-Limit-the-response-size-of-ExecSync.patch
* Mon Jun 06 2022 asaraiAATTsuse.com- Update to containerd v1.5.12. Upstream release notes:
* Thu Apr 14 2022 asaraiAATTsuse.com- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517
* Thu Mar 03 2022 asaraiAATTsuse.com- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441- Remove upstreamed patch: - CVE-2022-23648.patch
* Wed Mar 02 2022 asaraiAATTsuse.com[ This patch was only released in SLES and Leap. ]- Add patch for CVE-2022-23648. bsc#1196441 + CVE-2022-23648.patch
* Fri Nov 19 2021 asaraiAATTsuse.com- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814 bsc#1193273 CVE-2021-41190
* Wed Oct 06 2021 asaraiAATTsuse.com- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355- Switch to Go 1.16.x compiler, in line with upstream.
* Wed Oct 06 2021 asaraiAATTsuse.com- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355- Switch to Go 1.16.x compiler, in line with upstream.
* Fri Oct 01 2021 dcermakAATTsuse.com- Install systemd service file as well (fixes bsc#1190826)
* Tue Jul 20 2021 asaraiAATTsuse.com- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282- Remove upstreamed patches: - bsc1188282-use-chmod-path-for-checking-symlink.patch
* Wed Jul 14 2021 asaraiAATTsuse.com[ This patch was only released in SLES and Leap. ]- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282 + bsc1188282-use-chmod-path-for-checking-symlink.patch
* Wed Jul 07 2021 bwiedemannAATTsuse.com- Build with go1.15 for reproducible build results (boo#1102408)
* Fri Apr 16 2021 asaraiAATTsuse.com- Drop long-since upstreamed patch, originally needed to fix i386 builds on SLES: - 0001-makefile-remove-emoji.patch
* Sat Mar 06 2021 asaraiAATTsuse.com- Update to containerd v1.4.4, to fix CVE-2021-21334.
* Tue Feb 02 2021 asaraiAATTsuse.com- Update to handle the docker-runc removal, and drop the -kubic flavour. bsc#1181677 bsc#1181749
* Fri Jan 29 2021 asaraiAATTsuse.com- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce. bsc#1181594- Install the containerd-shim
* binaries and stop creating docker-containerd-shim because that isn\'t used by Docker anymore. bsc#1183024
* Mon Dec 21 2020 asaraiAATTsuse.com- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and fixes CVE-2020-15257. bsc#1178969 bsc#1180243
* Fri Sep 18 2020 asaraiAATTsuse.com- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce. boo#1176708 bsc#1177598 CVE-2020-15157- Refresh patches:
* 0001-makefile-remove-emoji.patch
* Thu Jun 25 2020 asaraiAATTsuse.com- Use Go 1.13 for build.
* Tue Jun 02 2020 asaraiAATTsuse.com- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce. bsc#1172377
* Tue Oct 08 2019 asaraiAATTsuse.com- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce. bsc#1153367 bsc#1157330
* Fri Jun 28 2019 asaraiAATTsuse.com- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce. bsc#1139649- Remove containerd-test (it\'s not useful for actual testing).
* Fri May 03 2019 asaraiAATTsuse.com- Update to containerd v1.2.5, which is required for v18.09.5-ce. bsc#1128376 boo#1134068 https://github.com/containerd/containerd/releases/tag/v1.2.5
* Thu Mar 21 2019 sgrunertAATTsuse.com- Update containerd to v1.2.4
* cri: Set /etc/hostname
* cri: Fix env performance issue
* runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve bsc#1121967 CVE-2019-5736
* cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
* Windows: NewDirectIOFromFIFOSet
* Changelogs from previous versions also included in this update: https://github.com/containerd/containerd/releases/tag/v1.2.3
* Tue Feb 05 2019 asaraiAATTsuse.com- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce. bsc#1124308
* Fix rare deadlock on FIFO creation with timeout
* Fix a bug that a container can\'t be stopped or inspected when its corresponding image is deleted
* Fix a bug that the cri plugin handles containerd events outside of k8s.io namespace more changes at: https://github.com/containerd/containerd/releases/tag/v1.2.2 Changelogs from previous versions also included in this update: https://github.com/containerd/containerd/releases/tag/v1.2.1 https://github.com/containerd/containerd/releases/tag/v1.2.0 https://github.com/containerd/containerd/releases/tag/v1.1.4 https://github.com/containerd/containerd/releases/tag/v1.1.3- Remove required_dockerrunc commit pinning, as it just lead to issues.- Remove upstreamed patches. - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
* Fri Jan 11 2019 sgrunertAATTsuse.com- Disable leap based builds for kubic flavor. bsc#1121412
* Thu Dec 20 2018 cleeAATTsuse.com- Update go requirements to >= go1.10 to fix
* bsc#1118897 CVE-2018-16873 go#29230 cmd/go: remote command execution during \"go get -u\"
* bsc#1118898 CVE-2018-16874 go#29231 cmd/go: directory traversal in \"go get\" via curly braces in import paths
* bsc#1118899 CVE-2018-16875 go#29233 crypto/x509: CPU denial of service
* Mon Nov 05 2018 asaraiAATTsuse.com- Add backport of https://github.com/containerd/containerd/pull/2764, which is required for us to build containerd on i586 SLE-12 (where /bin/sh doesn\'t like emoji in shell scripts). bsc#1102522 bsc#1113313 + 0001-makefile-remove-emoji.patch
* Wed Aug 22 2018 asaraiAATTsuse.com- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. bsc#1102522
* Thu Aug 16 2018 asaraiAATTsuse.com- Merge -kubic packages back into the main Virtualization:containers packages. This is done using _multibuild to add a \"kubic\" flavour, which is then used to conditionally compile patches and other kubic-specific features. bsc#1105000
* Wed Aug 01 2018 asaraiAATTsuse.com- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage to work with Docker and containerd. fate#325877
* Wed Jul 25 2018 asaraiAATTsuse.com- Update to containerd v1.1.1, which is the required version for the Docker v18.06.0-ce upgrade. bsc#1102522- Add backport of https://github.com/containerd/containerd/pull/2534 to make the man page no longer pollute the global namespace. + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch- Remove the following patch since it has already been merged upstream. - bsc1065109-0001-makefile-add-support-for-build_flags.patch- Remove systemd-related files and add docker-containerd-
* symlinks; this aligns with the upstream defaults where dockerd will execute docker-containerd. Version upgrades of docker are expected to work more smoothly as much of the upgrade logic is implemented in dockerd.- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with /usr/src/containerd/
* rpmlint errors (which don\'t affect normal users of this package).
* Wed Jun 13 2018 dcassanyAATTsuse.com- Make use of %license macro
* Tue Jun 05 2018 asaraiAATTsuse.com- Remove \'go test\' from %check section, as it has only ever caused us problems and hasn\'t (as far as I remember) ever caught a release-blocking issue. Smoke testing has been far more useful. boo#1095817
* Wed May 16 2018 jmassaguerplaAATTsuse.com- Review obsoletes tag to fix bsc#1080978
* Thu Apr 12 2018 fcastelliAATTsuse.com- Put containerd under the podruntime slice. This the recommended deployment to allow fine resource control on Kubernetes. bsc#1086185
* Mon Feb 12 2018 rbrownAATTsuse.com- Add ${version} to equivalent non-kubic package provides
* Thu Feb 08 2018 rbrownAATTsuse.com- Add Provides for equivalent non-kubic packages
* Thu Feb 01 2018 roAATTsuse.de- do not build on s390, only on s390x (no go on s390)
* Wed Dec 27 2017 dimstarAATTopensuse.org- Fix build with RPM 4.14: exclude is not meant for files to NOT be packaged, but should only be used if the files are to be excluded from a glob when they end up in a different package. Rather remove the unwanted files in the install section.
* Mon Dec 11 2017 asaraiAATTsuse.com- Update to containerdAATT06b9cb35161009dcb7123345749fef02f7cea8e0, which is requried by Docker 17.09.1_ce.
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Thu Oct 26 2017 asaraiAATTsuse.com- Set --start-timeout=2m by default to match upstream. bsc#1064926
* Thu Oct 26 2017 asaraiAATTsuse.com- Use the upstream makefile so that Docker can get the commit ID in `docker info`. This also will avoid possible future warnings being spit out like bsc#1065109 and boo#1053532.- Backport https://github.com/containerd/containerd/pull/1686, which is required for the above fix. bsc#1065109 boo#1053532 + bsc1065109-0001-makefile-add-support-for-build_flags.patch
* Wed Oct 18 2017 asaraiAATTsuse.com- Update to containerdAATT3addd840653146c90a254301d6c3a663c7fd6429, which is required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few bugfixes missing).
* Thu Aug 03 2017 asaraiAATTsuse.com- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
* Thu Jul 06 2017 thippAATTsuse.de- change dependency to docker-runc
* Thu May 04 2017 jmassaguerplaAATTsuse.com- fix golang requirement to 1.7 for the subpackages
* Tue May 02 2017 jmassaguerplaAATTsuse.com- fix golang requirement to 1.7
* Fri Apr 28 2017 jengelhAATTinai.de- Replace %__-type macro indirections
* Thu Apr 13 2017 jmassaguerplaAATTsuse.com- update containerd to the commit version needed for docker-v17.04.0-ce (bsc#1034053) fix bsc#1032769: containerd spurious messages filling journal
* Wed Apr 12 2017 jmassaguerplaAATTsuse.com- make sure this package is being built with go 1.7
* Wed Apr 12 2017 jmassaguerplaAATTsuse.com- remove the go_arches macro because we are using go1.7 which is available in all archs
* Wed Apr 12 2017 asaraiAATTsuse.com- Set TasksMax=infinity to make sure runC doesn\'t start failing randomly.
* Fri Feb 24 2017 jmassaguerplaAATTsuse.com- update to docker 1.13.0 requirement
* Sat Jan 14 2017 asaraiAATTsuse.com- Update docker to the version used in Docker 1.12.6. This is necessary to fix CVE-2016-9962 (bsc#1012568).
* Mon Dec 19 2016 jmassaguerplaAATTsuse.com- update containerd to the version used in docker 1.12.5 (bsc#1016307). This fixes bsc#1015661
* Thu Nov 24 2016 jmassaguerplaAATTsuse.com- fix runc version fix bsc#1009961
* Thu Nov 24 2016 jmassaguerplaAATTsuse.com- fix version so that it contains a sequence number and zypper does not think is a downgrade
* Tue Oct 25 2016 jmassaguerplaAATTsuse.com- fix bsc#1006368: docker/containerd is broken when installed by SuSE Studio in an appliance: We were missing the Requires(post): %fillup_prereq
* Tue Oct 25 2016 jmassaguerplaAATTsuse.com- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f (see RUNC_COMMIT in Dockerfile)
* Thu Oct 13 2016 jmassaguerplaAATTsuse.com- update to commit 0366d7e which is the one required for docker-1.12.2 (bsc#1004490)
* Mon Sep 19 2016 jmassaguerplaAATTsuse.com- fix go_arches definition: use global instead of define, otherwise it fails to build
* Thu Aug 25 2016 jmassaguerplaAATTsuse.com- Remove GOPATH at the end of the GOPATH assignment cause GOPATH is empty and if we do that, we get the path \"\" appended, which causes gcc6-go to complain
* Wed Aug 24 2016 jmassaguerplaAATTsuse.com- add go_arches in project configuration: this way, we can use the same spec file but decide in the project configuration if to use gc-go or gcc-go for some archs.
* Mon Aug 22 2016 jmassaguerplaAATTsuse.com- update to v2.3.0 (bsc#995058)- Remove patches which were already merged upstream:
* socket-activation-01-vendor.patch
* socket-activation-02-daemon.patch
* socket-activation-03-ctr.patch
* Thu Aug 18 2016 jmassaguerplaAATTsuse.com- use gcc6-go instead of gcc5-go (bsc#988408)- build ppc64le with gc-go because this version builds with gc-go 1.6
* Thu Aug 18 2016 cbraunerAATTsuse.com- bump git commit id to the one required by docker v1.12.0- run test during build- only run tests on architectures that provide the go list and got test tools- add aarch64 to go arches
* Thu Aug 18 2016 cbraunerAATTsuse.de- Add containerd-test package which contains the source code and the test. This package will be used to run the integration tests.- Simplify package build and check sections: Instead of symlinking we default to cp -avr. go list gets confused by symlinks hence, we need to copy the source code anyway if we want to run unit tests during package build at some point.
* Tue Aug 16 2016 asaraiAATTsuse.com
* Explicitly state the version dependency for runC, to avoid potential issues with incompatible component versions. These must be updated
* each time we do a release
*. Unfortunately we cannot create a hard dependency because that would conflict with Docker, and was a mistake on upstream\'s part. bsc#993847
* Wed Jul 20 2016 asaraiAATTsuse.com
* Set --runtime option specifically to runC. bsc#978260
* Fri Jun 17 2016 asaraiAATTsuse.de
* Update to containerd v0.2.2. (bsc#989566 FATE#320763)
* Includes updates to the out-of-tree patches.
* Mon May 02 2016 asaraiAATTsuse.de
* Remove MountFlags=slave from containerd.service. This causes many issues with interactions with Docker.
* Fri Apr 29 2016 asaraiAATTsuse.de
* Added /usr/sbin/rccontainerd symlink as per suse-missing-rclink.
* Updated socket activation patches to use the same patchset that was merged upstream (https://github.com/docker/containerd/pull/178):
* socket-activation-01-vendor.patch
* socket-activation-02-daemon.patch
* socket-activation-03-ctr.patch
* Removed aarch64 that was patched upstream: - fix-aarch64-epoll.patch
* Update containerd to 0.2.1. Upstream changelog:
* Fixes for cgroup memory updates and process labeling.
* Truncate the event log on disk and in memory so that it does not grow forever. This is mainly used for higher levels to receive past events if they miss any.
* Tue Apr 19 2016 asaraiAATTsuse.de
* Use the gc compiler for aarch64 builds.
* Add a patch to fix the new aarch64 build support, which has not yet been merged upstream (https://github.com/docker/containerd/pull/195): + fix-aarch64-epoll.patch
* Rebase the socket activation patchset which has yet to be merged (https://github.com/docker/containerd/pull/178):
* socket-activation-01-vendor.patch
* socket-activation-02-daemon.patch
* socket-activation-03-ctr.patch
* Update to containerd 0.2.0. Changelog: + Add Limit to PidsStats + Add timeout flag for container start times. + Add timeout option for GRPC connection. + Add no_pivot_root support. + Add runtimeArgs to pass to shim
* Move epoll syscall to a separate package so we can build on aarch64.
* Fix ctr termios restoration isssues.
* Several bug fixes. - Remove dependencies on larger packages.
* Thu Mar 31 2016 asaraiAATTsuse.de
* Use socket activation with the containerd-daemon. This requires a not-yet-upstream patchset (https://github.com/docker/containerd/pull/178): + socket-activation-01-vendor.patch + socket-activation-02-daemon.patch + socket-activation-03-ctr.patch
* Remove MountFlags=slave since it\'s not relevant to containerd and might cause issues in the future.
* Update to containerd 0.1.0. This required quite a few fixes.
* Sun Mar 27 2016 asaraiAATTsuse.de
* Add initial packaging of containerd 0.0.5.
* Add service and sysconfig files.
* Separately package the client from the server.
* Install to /usr/sbin.