From 7629a0beb5d6121d3ea9e2b198eefca5fba3fc7d Mon Sep 17 00:00:00 2001
From: Lokesh Mandvekar <lsm5@fedoraproject.org>
Date: Jan 19 2019 04:17:28 +0000
Subject: docker-2:1.13.1-62.git1185cfd


- Resolves: #1666565, #1666566 - CVE-2018-20699
- Resolves: #1663068, #1667622 - umount all procfs and sysfs with --no-pivot
- built docker @projectatomic/docker-1.13.1 commit 1185cfd
- built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>

---

diff --git a/.gitignore b/.gitignore
index db2744d..ed25ad5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -180,3 +180,5 @@
 /docker-9cb56fd.tar.gz
 /docker-lvm-plugin-20a1f68.tar.gz
 /libnetwork-d00ceed.tar.gz
+/docker-1185cfd.tar.gz
+/runc-e4ffe43.tar.gz
diff --git a/docker.spec b/docker.spec
index ab8ed96..3a53edc 100644
--- a/docker.spec
+++ b/docker.spec
@@ -35,7 +35,7 @@
 
 # docker
 %global git_docker https://github.com/projectatomic/docker
-%global commit_docker 9cb56fd9a24a26e9d87725252e0023102c7ce5bf
+%global commit_docker 1185cfdf0469a0434e9227c973f8783412237b82
 %global shortcommit_docker %(c=%{commit_docker}; echo ${c:0:7})
 # docker_branch used in %%check
 %global docker_branch docker-1.13.1
@@ -60,7 +60,7 @@
 
 # docker-runc
 %global git_runc https://github.com/projectatomic/runc/
-%global commit_runc b425831806162cf9e8b8ccb34a251fbd74209d77
+%global commit_runc e4ffe43a03ac84e6bfd1156f1612338b2ed2c0a3
 %global shortcommit_runc %(c=%{commit_runc}; echo ${c:0:7})
 
 # docker-containerd
@@ -93,7 +93,7 @@ Name: %{repo}
 Epoch: 2
 %endif
 Version: 1.13.1
-Release: 62.git%{shortcommit_docker}%{?dist}
+Release: 63.git%{shortcommit_docker}%{?dist}
 Summary: Automates deployment of containerized applications
 License: ASL 2.0
 URL: https://%{provider}.%{provider_tld}/projectatomic/%{repo}
@@ -944,6 +944,12 @@ exit 0
 %{_unitdir}/%{repo}-lvm-plugin.*
 
 %changelog
+* Sat Jan 19 2019 Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.13.1-63.git1185cfd
+- Resolves: #1666565, #1666566 - CVE-2018-20699
+- Resolves: #1663068, #1667622 - umount all procfs and sysfs with --no-pivot
+- built docker @projectatomic/docker-1.13.1 commit 1185cfd
+- built docker-runc @projectatomic/docker-1.13.1 commit e4ffe43
+
 * Mon Jul 23 2018 Jonathan Lebon <jonathan@jlebon.com> - 2:1.13.1-62.git9cb56fd
 - simplify d-s-s config file installation
 
diff --git a/sources b/sources
index 22ad40b..e8be347 100644
--- a/sources
+++ b/sources
@@ -1,9 +1,9 @@
-SHA512 (container-storage-setup-65f91d4.tar.gz) = 1494e9905b9b8dbffe051161c550ea54c90e6040c141cf7bdf65274462189b51d92fe252449998ced93083769defad310f87a85163dc26e16324a337ff082518
 SHA512 (containerd-42e825a.tar.gz) = f06b5b5b19b2c5bd5e188ec2fb010bc55567ae91ed6021e74ee549836e2d4f4657db27ce129737bfb2d5b7abcbf2ee18e7d5ff4c8319fbfa512e0498dea614b0
-SHA512 (docker-9cb56fd.tar.gz) = f806d1980a6ab849f90188605e85d4823296a3af1336f123de4800165c4411c26258a2c17854ccef1751a73388fa85b7a06ac7cd6a00a43bc0fb51ec1d3f166b
+SHA512 (container-storage-setup-65f91d4.tar.gz) = 1494e9905b9b8dbffe051161c550ea54c90e6040c141cf7bdf65274462189b51d92fe252449998ced93083769defad310f87a85163dc26e16324a337ff082518
+SHA512 (docker-1185cfd.tar.gz) = ad10e8e54ed9ce87a769312c8e2d65872af5d4f61970aee2247c79e17f890482270527ce0b140a53e563d4e2544b6317dd7adc6934d472155dab6ffb2d4d6708
 SHA512 (docker-lvm-plugin-20a1f68.tar.gz) = b2d6f91f8d4910f89f5676028d465453c0ab6430b03a2c0285a2665fce4dbc27037a60494a24576ecaf31afb5e2b961e8539d550589589644c30b3dbac9a4cd6
 SHA512 (docker-novolume-plugin-385ec70.tar.gz) = 267558fe8903821f0900cca4d67f7937f0cdf9d2d5be8bcdb90ce0de0931668fecb47d836debabcc00b611c71456f5c920b431083cbb8190589d11dfc978f0e8
 SHA512 (libnetwork-d00ceed.tar.gz) = 8da8a78c034929b7cc3cc5f79369ef7e64040876be6b74172a244608a1fdd3e20c0bc9a3d4338fe53f0e85c6dc33b1ca72626b7bf68bf00b4dbe810fc57365f8
 SHA512 (rhel-push-plugin-af9107b.tar.gz) = e17c8970edff2eae4a2cc7f5a09a054171700032f2e6d15b043f3ebdb902385a95c4afed3cedd67e5d7bf4292a0b945f7c84f84f1162930fc8f365825110e573
-SHA512 (runc-b425831.tar.gz) = 549f2bcab238e9bb801974e2bf6c68e69d316aea5ecf96822b99bb1cf76669f4f6ededaf430062a63d97cfe4899bc594308b142f86e5b3308ef8a712b63d16bc
+SHA512 (runc-e4ffe43.tar.gz) = f9bd922615d5d9f709fbdbd6fcd9850d1b11bc733aa4958983a568bb7465d519dbcc4da9c8cc4d2ec3cb2f2c55ecb96aebb2f341ff036d8820a80073b55679ab
 SHA512 (tini-fec3683.tar.gz) = ee46d21467f8bacb4e8be72f5dfcbb23c1964286e90b4b3d3bf67dbbf79a337968ac8a0042a8191e329a65398b20ea160aae3ae5ef20ee03ebae11c2083d7621