- fix shebang in demos/flatpak-run.sh

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

bubblewrap 0.11.0

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Update the changelog: Add SUSE CVE bug numbers.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving CVE-2024-42472 in Flatpak.
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink already
    exists and already has the desired target 
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
    --add-seccomp-fd argument
  * Improve memory allocation behaviour

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

bubblewrap 0.8.0

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Update to 0.6.2

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 0.6.1:
 - Add a release checklist
 - completions: Make zsh completion non-executable
   The Autotools build system installed it with 0644 permissions because
   it's listed as DATA, but the Meson build system installs executable
   files as executable by default.
   zsh completions don't need to be executable to work, and this one doesn't
   have the `#!` marker that should start an executable script.
- update to 0.6.0:
 - meson: Improve compatibility with Meson 0.49
   That version doesn't allow more than two arguments for define_variable.
 - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
   This test is hanging when run under 'meson dist' for some reason, but
   not when run under 'meson test', and not locally, only in the Github
   Workflow-based CI. Disable it for now.
 - meson: Actually build and run the tests
 - tests: Fix compiler warnings for unused arguments
 - meson: Run test scripts from $srcdir
 - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
 - meson: Run the Python test script with Python, not bash
   The python build option can be used to swap to a different interpreter,
   for environments like the Steam Runtime where the python3 executable in
   the PATH is extremely old but there is a better interpreter available.
   This is treated as non-optional, because Meson is written in Python,
   so the situation where there is no Python interpreter at build-time
   shouldn't arise.
 - meson: Build the try-syscall helper
 - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
 - meson.build: Remove unnecessary check for sh
 - Add a Meson build system

• Files Changed
• Browse Source

New upstream release

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 0.4.1:
 * retcode: fix return code with syncfd and no event_fd
 * Ensure we're always clearing the cap bounding set
 * tests: Update output patterns for libcap >= 2.29
 * Don't rely on geteuid() to know when to switch back from setuid root
 * Don't support --userns2 in setuid mode
 * fixes CVE-2020-5291
 * fixes bsc#1168291

• Files Changed
• Browse Source