crun - Debian Package Tracker

general

source: crun (main)
version: 1.19.1-1
maintainer: Faidon Liambotis (DMD) (LowNMU)
uploaders: Reinhard Tartler [DMD] – Dmitry Smirnov [DMD]
arch: any
std-ver: 4.7.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 0.17+dfsg-1+deb11u2
old-upd: 0.17+dfsg-1+deb11u2
stable: 1.8.1-1+deb12u1
testing: 1.18.2-1
unstable: 1.19.1-1

versioned links

0.17+dfsg-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.1-1+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.18.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.19.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

crun

action needed

Debci reports failed tests high

unstable: fail (log)
The tests ran in 0:06:13
Last run: 2025-02-13T23:38:10.000Z
Previous status: unknown

testing: pass (log)
The tests ran in 0:07:09
Last run: 2025-02-16T14:13:36.000Z
Previous status: unknown

Created: 2025-01-18 Last update: 2025-02-22 05:32

Marked for autoremoval on 21 March: #1095245 high

Version 1.18.2-1 of crun is marked for autoremoval from testing on Fri 21 Mar 2025. It is affected by #1095245. The removal of crun will also cause the removal of (transitive) reverse dependencies: cockpit-podman, debcraft, distrobox, golang-github-containers-toolbox, podman, rust-repro-env. You should try to prevent the removal by fixing these RC bugs.

Created: 2025-02-12 Last update: 2025-02-22 05:02

A new upstream version is available: 1.20 high

A new upstream version 1.20 is available, you should consider packaging it.

Created: 2025-02-06 Last update: 2025-02-22 01:01

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2025-24965: crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Created: 2025-02-20 Last update: 2025-02-20 05:57

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2025-24965: crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Created: 2025-02-20 Last update: 2025-02-20 05:57

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2025-24965: crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Created: 2025-02-20 Last update: 2025-02-20 05:57

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2025-24965: crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Created: 2025-02-20 Last update: 2025-02-20 05:57

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2025-01-10 Last update: 2025-02-22 05:02

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.19.1-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit f76082a923fe31c7f4a6c8745813dfd491158a56
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Wed Jan 15 18:16:20 2025 +0200

    Build-Depend on libcriu-dev only on criu's supported architectures (currently: amd64 arm64 ppc64el s390x).

commit 6992408e437051d9b88a4765cf879dddb6b33859
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Sat Jan 4 22:36:13 2025 +0200

    Release 1.19.1-1

commit 361fd405943b92683ba30c3b8cd6552d7a82480b
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Sat Jan 4 12:10:30 2025 +0200

    New upstream release
    
    Build-Depend on golang-github-opencontainers-specs-dev (>= 1.2.0-2~),
    needed for the new CPU affinity functionality. (FTBFSes without it).

commit 10718242a45114d6f546f381ae62a5b55132c757
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Wed Nov 20 17:39:42 2024 +0200

    Add Closes for criu

commit 56e92ffe1fd89a8c983b2f106c2d5639227d2204
Author: Faidon Liambotis <paravoid@debian.org>
Date:   Wed Nov 20 17:38:28 2024 +0200

    Enable checkpoint/restore using criu

https://salsa.debian.org/api/v4/projects/debian%2Fcrun/pipelines?scope=finished&per_page=1 API request failed: 403 Forbidden at /srv/qa.debian.org/data/vcswatch/vcswatch line 431.

Created: 2024-11-20 Last update: 2025-02-20 11:00

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.1 instead of 4.7.0).

Created: 2025-02-21 Last update: 2025-02-21 04:27

testing migrations

excuses:
- Migration status for crun (1.18.2-1 to 1.19.1-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating crun would introduce bugs in testing: #1097132
- ∙ ∙ autopkgtest for crun/1.19.1-1: amd64: Regression or new test ♻ (reference ♻), arm64: No tests, superficial or marked flaky ♻ (reference ♻), ppc64el: No tests, superficial or marked flaky ♻ (reference ♻), s390x: No tests, superficial or marked flaky ♻ (reference ♻)
- ∙ ∙ crun unsatisfiable Build-Depends(-Arch) on armel: libcriu-dev
- ∙ ∙ crun unsatisfiable Build-Depends(-Arch) on armhf: libcriu-dev
- ∙ ∙ crun unsatisfiable Build-Depends(-Arch) on i386: libcriu-dev
- ∙ ∙ crun unsatisfiable Build-Depends(-Arch) on mips64el: libcriu-dev
- ∙ ∙ crun unsatisfiable Build-Depends(-Arch) on riscv64: libcriu-dev
- ∙ ∙ missing build on armel
- ∙ ∙ missing build on armhf
- ∙ ∙ missing build on i386
- ∙ ∙ missing build on mips64el
- ∙ ∙ missing build on riscv64
- ∙ ∙ arch:armel not built yet, autopkgtest delayed there
- ∙ ∙ arch:armhf not built yet, autopkgtest delayed there
- ∙ ∙ arch:i386 not built yet, autopkgtest delayed there
- ∙ ∙ arch:riscv64 not built yet, autopkgtest delayed there
- Additional info:
- ∙ ∙ Updating crun will fix bugs in testing: #1095245
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/c/crun.html
- ∙ ∙ Reproducible on amd64 - info ♻
- ∙ ∙ Reproducible on arm64 - info ♻
- ∙ ∙ Waiting for reproducibility test results on armhf - info ♻
- ∙ ∙ Waiting for reproducibility test results on i386 - info ♻
- ∙ ∙ 48 days old (needed 5 days)
- Not considered

news

[rss feed]

[2025-01-04] Accepted crun 1.19.1-1 (source) into unstable (Faidon Liambotis)
[2024-11-06] crun 1.18.2-1 MIGRATED to testing (Debian testing watch)
[2024-10-31] Accepted crun 1.18.2-1 (source) into unstable (Faidon Liambotis)
[2024-10-30] Accepted crun 1.18.1-1 (source) into unstable (Faidon Liambotis)
[2024-10-28] crun 1.18-1 MIGRATED to testing (Debian testing watch)
[2024-10-22] Accepted crun 1.18-1 (source) into unstable (Faidon Liambotis)
[2024-09-16] crun 1.17-1 MIGRATED to testing (Debian testing watch)
[2024-09-09] Accepted crun 1.17-1 (source) into unstable (Faidon Liambotis)
[2024-08-19] crun 1.16.1-1 MIGRATED to testing (Debian testing watch)
[2024-08-14] Accepted crun 1.16.1-1 (source) into unstable (Faidon Liambotis)
[2024-08-13] Accepted crun 1.16-1 (source) into unstable (Faidon Liambotis)
[2024-05-09] crun 1.15-1 MIGRATED to testing (Debian testing watch)
[2024-05-04] Accepted crun 1.15-1 (source) into unstable (Faidon Liambotis)
[2024-03-15] crun 1.14.4-1 MIGRATED to testing (Debian testing watch)
[2024-03-09] Accepted crun 1.14.4-1 (source) into unstable (Reinhard Tartler)
[2024-02-17] crun 1.14.1-1 MIGRATED to testing (Debian testing watch)
[2024-02-17] crun 1.14.1-1 MIGRATED to testing (Debian testing watch)
[2024-02-12] Accepted crun 1.14.1-1 (source) into unstable (Faidon Liambotis)
[2024-01-30] crun 1.14-1 MIGRATED to testing (Debian testing watch)
[2024-01-25] Accepted crun 1.14-1 (source) into unstable (Faidon Liambotis)
[2024-01-21] crun 1.13-1 MIGRATED to testing (Debian testing watch)
[2024-01-16] Accepted crun 1.13-1 (source) into unstable (Faidon Liambotis)
[2023-11-29] crun 1.12-1 MIGRATED to testing (Debian testing watch)
[2023-11-24] Accepted crun 1.12-1 (source) into unstable (Faidon Liambotis)
[2023-11-12] Accepted crun 0.17+dfsg-1+deb11u2 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Faidon Liambotis)
[2023-11-08] crun 1.11.1-1 MIGRATED to testing (Debian testing watch)
[2023-11-05] Accepted crun 1.8.1-1+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Faidon Liambotis)
[2023-11-02] Accepted crun 1.11.1-1 (source) into unstable (Faidon Liambotis)
[2023-11-02] crun 1.11-1 MIGRATED to testing (Debian testing watch)
[2023-10-27] Accepted crun 1.11-1 (source) into unstable (Faidon Liambotis)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.18.2-1
2 bugs