Accepting request 263863 from Virtualization

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/263863
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/docker?expand=0&rev=10

docker-1.3.1.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:80e63f0b87e140dcf13e3a2e23909a86f9a747cf567d8161cdba3fa589de4ccd
-size 5651106

docker-1.3.2.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:004221165147270dfb9ef90e9542746e26fdc98bd33bfed4fcaa7577552457df
+size 5666151

docker.changes

@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Wed Nov 26 11:27:06 UTC 2014 - fcastelli@suse.com
+
+- Updated to 1.3.2 (2014-11-20) - fixes bnc#907012 (CVE-2014-6407) and
+  bnc#907014 (CVE-2014-6408)
+  * Security:
+    - Fix tar breakout vulnerability
+    - Extractions are now sandboxed chroot
+    - Security options are no longer committed to images
+  * Runtime:
+    - Fix deadlock in `docker ps -f exited=1`
+    - Fix a bug when `--volumes-from` references a container that failed to start
+  * Registry:
+    - `--insecure-registry` now accepts CIDR notation such as 10.1.0.0/16
+    - Private registries whose IPs fall in the 127.0.0.0/8 range do no need
+      the `--insecure-registry` flag
+    - Skip the experimental registry v2 API when mirroring is enabled
+- Fixed minor packaging issues.
+
 -------------------------------------------------------------------
 Fri Oct 31 08:54:47 UTC 2014 - fcastelli@suse.com
 

docker.spec

@@ -16,9 +16,9 @@
 #
 
 
-%define git_version 4e9bbfa
+%define git_version 39fa2fa
 Name:           docker
-Version:        1.3.1
+Version:        1.3.2
 Release:        0
 Summary:        The Linux container runtime
 License:        Apache-2.0
@@ -121,6 +121,7 @@ install -D -m0644 contrib/completion/zsh/_docker "%{buildroot}/etc/zsh_completio
 #
 install -D -m 0644 %SOURCE1 %{buildroot}%{_unitdir}/%{name}.service
 install -D -m 0644 %SOURCE5 %{buildroot}%{_unitdir}/%{name}.socket
+ln -sf /sbin/service $RPM_BUILD_ROOT/usr/sbin/rcdocker
 
 #
 # udev rules that prevents dolphin to show all docker devices and slows down
@@ -135,22 +136,23 @@ install -D -m 644 %SOURCE4 %{buildroot}/var/adm/fillup-templates/sysconfig.docke
 %pre
 echo "creating group docker..."
 groupadd -r docker 2>/dev/null || :
-%service_add_pre %{name}.service
+%service_add_pre %{name}.service %{name}.socket
 
 %post
-%service_add_post %{name}.service
+%service_add_post %{name}.service %{name}.socket
 %{fillup_only -n docker}
 
 %preun
-%service_del_preun %{name}.service
+%service_del_preun %{name}.service %{name}.socket
 
 %postun
-%service_del_postun %{name}.service
+%service_del_postun %{name}.service %{name}.socket
 
 %files
 %defattr(-,root,root)
 %doc README.md LICENSE README_SUSE.md
 %{_bindir}/docker
+%{_sbindir}/rcdocker
 %{_prefix}/lib/docker/
 %{_prefix}/lib/docker/dockerinit
 %{_unitdir}/%{name}.service