Aleksa Sarai 0b7788c616 - Update to umoci v0.5.0. Upstream changelog is available from ...

<https://github.com/opencontainers/umoci/releases/tag/v0.5.0> bsc#1243388

  A security flaw was found in the OCI image-spec, where it is possible to
  cause a blob with one media-type to be interpreted as a different media-type.
  As umoci is not a registry nor does it handle signatures, this vulnerability
  had no real impact on umoci but for safety we implemented the now-recommended
  media-type embedding and verification. CVE-2021-41190

  Other changes in this release:

  * Several large reworks and API-related changes to the umoci's overlayfs
	support. This is only available to Go API users.
  * The runtime-spec config.json generated by umoci is updated to be more
	modern and work properly with modern runc versions.
  * The default gzip compression blocksize has been adjusted to match Docker.
  * zstd-compressed images are now fully supported. Users can explcitily
    request the compression algorithm for newly-generated layers with the
    --compress option.

- Remove upstreamed patches:
  - 0001-makefile-fix-bad-build-flags.patch
- Update umoci.keyring from upstream to include new signing keys.

OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/umoci?expand=0&rev=61

2025-05-21 07:47:38 +00:00

2.0 MiB (Stored with Git LFS)

Raw Permalink History

View Raw