Fix CVE in tar-split

copy: add shared blob directory support for OCI sources/destinations
  Aligning Docker version between containers/image and skopeo
  Update image-tools, and remove the duplicate Sirupsen/logrus vendor
  makefile: use -buildmode=pie
This commit is contained in:
Daniel J Walsh 2017-11-08 16:20:14 +00:00
parent 1f4e54e755
commit 0cca2fcf48
3 changed files with 12 additions and 4 deletions

1
.gitignore vendored
View File

@ -20,3 +20,4 @@
/skopeo-875dd2e.tar.gz
/skopeo-28d4e08.tar.gz
/skopeo-dd2c3e3.tar.gz
/skopeo-7fd6f66.tar.gz

View File

@ -26,7 +26,7 @@
%global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo}
%global import_path %{provider_prefix}
%global git0 https://%{import_path}
%global commit0 dd2c3e3a8e33b849f3625f4f56fa229c76448629
%global commit0 7fd6f66b7ff599767a2bb50ad96521a23ead8297
%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
# e.g. el6 has ppc64 arch without gcc-go, so EA tag is required
@ -37,8 +37,8 @@ Name: %{repo}
%if 0%{?centos}
Epoch: 1
%endif # centos
Version: 0.1.24
Release: 8.git%{shortcommit0}%{?dist}
Version: 0.1.25
Release: 1.git%{shortcommit0}%{?dist}
Summary: Inspect Docker images and repositories on registries
License: ASL 2.0
URL: %{git0}
@ -306,6 +306,13 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
%{_datadir}/bash-completion/completions/%{name}
%changelog
* Wed Nov 8 2017 dwalsh <dwalsh@redhat.com> - 0.1.25-1.git7fd6f66b
- Fix CVE in tar-split
- copy: add shared blob directory support for OCI sources/destinations
- Aligning Docker version between containers/image and skopeo
- Update image-tools, and remove the duplicate Sirupsen/logrus vendor
- makefile: use -buildmode=pie
* Tue Nov 7 2017 dwalsh <dwalsh@redhat.com> - 0.1.24-8.git28d4e08a
- Add /usr/share/containers/mounts.conf

View File

@ -1 +1 @@
SHA512 (skopeo-dd2c3e3.tar.gz) = cc8d8c6b7add3ef3bd8ddbacb11a1ce35eb767f47f8025d44576490dca59343d8c2a7211d8f83a681d53fc93c23925681b637be11515b84984c637f238f275bc
SHA512 (skopeo-7fd6f66.tar.gz) = ee1d65a4a3a5d08873ebf48c158490b20cdbe60b9893346f05f51caa30b19ddf6741805b6b056dd68d2e9b9d1069c6a7842199f41d3c0c60c545b0ffd9186b59