From 8ee02a0b7767455be4015125331bd098d3bbb5d073515756a070c442e14d7559 Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Tue, 28 Nov 2023 09:55:45 +0000 Subject: [PATCH 1/2] Accepting request 1129485 from home:cyphar:docker Add references to PLATYPUS CVEs: * Deny containers access to /sys/devices/virtual/powercap by default. - CVE-2020-8694 bsc#1170415 - CVE-2020-8695 bsc#1170446 - CVE-2020-12912 bsc#1178760 OBS-URL: https://build.opensuse.org/request/show/1129485 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=398 --- docker.changes | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docker.changes b/docker.changes index ec488e4..f5af9b9 100644 --- a/docker.changes +++ b/docker.changes @@ -3,6 +3,10 @@ Fri Oct 27 21:14:37 UTC 2023 - Aleksa Sarai - Update to Docker 24.0.7-ce. See upstream changelong online at . + * Deny containers access to /sys/devices/virtual/powercap by default. + - CVE-2020-8694 bsc#1170415 + - CVE-2020-8695 bsc#1170446 + - CVE-2020-12912 bsc#1178760 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch From e62df9de4c9d6710876d41ff11f0f86539a36915764979c95b7733a08b54cf75 Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Tue, 28 Nov 2023 13:41:42 +0000 Subject: [PATCH 2/2] Accepting request 1129615 from home:cyphar:docker Add bsc#1217513 reference. OBS-URL: https://build.opensuse.org/request/show/1129615 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=399 --- docker.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker.changes b/docker.changes index f5af9b9..cf15076 100644 --- a/docker.changes +++ b/docker.changes @@ -2,7 +2,7 @@ Fri Oct 27 21:14:37 UTC 2023 - Aleksa Sarai - Update to Docker 24.0.7-ce. See upstream changelong online at - . + . bsc#1217513 * Deny containers access to /sys/devices/virtual/powercap by default. - CVE-2020-8694 bsc#1170415 - CVE-2020-8695 bsc#1170446