From patchwork Thu Dec 13 20:48:39 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Leo Famulari X-Patchwork-Id: 464 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 3D0BB16956; Thu, 13 Dec 2018 20:50:16 +0000 (GMT) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_HI, T_DKIM_INVALID,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.0 Received: from lists.gnu.org (lists.gnu.org [IPv6:2001:4830:134:3::11]) by mira.cbaines.net (Postfix) with ESMTP id BC3B71694D for ; Thu, 13 Dec 2018 20:50:15 +0000 (GMT) Received: from localhost ([::1]:54798 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gXXvz-0006f0-Cz for patchwork@mira.cbaines.net; Thu, 13 Dec 2018 15:50:15 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:35098) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gXXvr-0006dI-MY for guix-patches@gnu.org; Thu, 13 Dec 2018 15:50:08 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gXXvm-0002cV-7p for guix-patches@gnu.org; Thu, 13 Dec 2018 15:50:07 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:42664) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gXXvm-0002c0-1i for guix-patches@gnu.org; Thu, 13 Dec 2018 15:50:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gXXvl-0003Rm-Vo for guix-patches@gnu.org; Thu, 13 Dec 2018 15:50:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#33730] [PATCH] gnu: Singularity: Update to 2.6.1 [fixes CVE-2018-19295]. Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 13 Dec 2018 20:50:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 33730 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 33730@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.154473414713182 (code B ref -1); Thu, 13 Dec 2018 20:50:01 +0000 Received: (at submit) by debbugs.gnu.org; 13 Dec 2018 20:49:07 +0000 Received: from localhost ([127.0.0.1]:46922 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gXXus-0003QY-NV for submit@debbugs.gnu.org; Thu, 13 Dec 2018 15:49:07 -0500 Received: from eggs.gnu.org ([208.118.235.92]:53441) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gXXuo-0003Q1-TH for submit@debbugs.gnu.org; Thu, 13 Dec 2018 15:49:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gXXug-0000PA-Ju for submit@debbugs.gnu.org; Thu, 13 Dec 2018 15:48:57 -0500 Received: from lists.gnu.org ([2001:4830:134:3::11]:48471) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gXXug-0000P0-Ga for submit@debbugs.gnu.org; Thu, 13 Dec 2018 15:48:54 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:34780) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gXXue-0006Zj-Os for guix-patches@gnu.org; Thu, 13 Dec 2018 15:48:54 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gXXuZ-0000Cs-MQ for guix-patches@gnu.org; Thu, 13 Dec 2018 15:48:52 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:60379) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gXXuZ-00009U-GZ for guix-patches@gnu.org; Thu, 13 Dec 2018 15:48:47 -0500 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 661CF2112B; Thu, 13 Dec 2018 15:48:45 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Thu, 13 Dec 2018 15:48:45 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; s=mesmtp; bh=0qCSsHsEnVnyaSRYPN5vHRe LYQWFmjvJPnuIPts/MUE=; b=wJri6VPpw7MXKJjL4mrcjZ6C3HByYJc6rNOCepD zAFy0e1A/3iEApX6gurAIG4XdKWbcb5gImcFxrDEdBtAdr6NaZ6SfTNJ0wfHd723 AkkFhMy/yrp1txLDqbvv5KU/1dk64vZSWasjujG9Nswq3MgS46xF3vPZUDrXauJO Dc2o= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:date:from :message-id:mime-version:subject:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=0qCSsHsEnVnyaSRYP N5vHReLYQWFmjvJPnuIPts/MUE=; b=CtWp8J+UUIHbhmGtG6vQC7NQSAmaAPv33 dX21RGMB4ABMfxtssv+yDBKC//kXSqd8XiLf+YR6NHUy773Q7PRn9XA9Gv7GZNaD RwrhvzxSjbjwLHUkfophD+7bf9eOOGdTJBUw/JkJ/STNWUctgqqzXSNTUqwlZkKT H20yCat/ohT4yfBisOG1GgwVcC8RyHdAzHu86vrmL+FYzz6U1drWfgVvc6b6vB9J 31hYU++dR6KqiTIe3n53pdmOO8Crd5AfdvIfJgGzKrPOE8HbfcfDjnu1ddwNGl1I cywWMrF+htunCwlJKdKPgz8mhE+nZMI7bU1vUqhOR126sAeSXXK0g== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedtkedrudehvddgudegudcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfhuthenuceurghilhhouhhtmecu fedttdenucenucfjughrpefhvffufffkofgggfestdekredtredttdenucfhrhhomhepnf gvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuffho mhgrihhnpehgihhthhhusgdrtghomhenucfkphepjeeirdduvdegrddvtddvrddufeejne curfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgvnecu vehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from jasmine.lan (c-76-124-202-137.hsd1.pa.comcast.net [76.124.202.137]) by mail.messagingengine.com (Postfix) with ESMTPA id 8E77B102F3 for ; Thu, 13 Dec 2018 15:48:43 -0500 (EST) From: Leo Famulari Date: Thu, 13 Dec 2018 15:48:39 -0500 Message-Id: X-Mailer: git-send-email 2.20.0 MIME-Version: 1.0 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: "Guix-patches" X-getmail-retrieved-from-mailbox: Patches Our Singularity package is not vulnerable to CVE-2018-19295 by default, becuase that vulnerability is based on the 'mount', 'start', and 'action' Singularity binaries being installed setuid, which we do not do in Guix. * gnu/packages/linux.scm (singularity): Update to 2.6.1. --- gnu/packages/linux.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm index 1cdf2bf47..de6439449 100644 --- a/gnu/packages/linux.scm +++ b/gnu/packages/linux.scm @@ -2612,7 +2612,7 @@ thanks to the use of namespaces.") (define-public singularity (package (name "singularity") - (version "2.5.1") + (version "2.6.1") (source (origin (method url-fetch) (uri (string-append "https://github.com/singularityware/singularity/" @@ -2620,7 +2620,7 @@ thanks to the use of namespaces.") "/singularity-" version ".tar.gz")) (sha256 (base32 - "0f28dgf2qcy8ljjfix7p9q36q12j7rxyicfzzi4n0fl8zr8ab88g")))) + "1whx0hqqi1326scgdxxxa1d94vn95mnq0drid6s8wdp84ni4d3gk")))) (build-system gnu-build-system) (arguments `(#:configure-flags