Open
Fix CVE-2023-30549；CVE-2025-65105 #29
byj0Add on May 27
Fix CVE-2023-30549；CVE-2025-65105 #29
Open
Merge blocked
May 27 Set iotwins as approver
May 27 Added label: sig/sig-HPC
openeuler-ci-bot
May 27 Comments：
May 27 Comments：
Welcome To openEuler Community
Hey @byj0 , thanks for your contribution to the community.
Bot Usage Manual
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.
Contact Guide
If you have any questions, please contact the SIG: sig-HPC ,
and any of the maintainers: @iotwins ,
73 messages are collapsed here。 See more
openeuler-ci-bot
Jun 8 Comments：
Jun 8 Comments：
x86_64架构构建及构建后检查：multiarch/src-openeuler/x86-64/apptainer/37/console
Jun 8 Removed label: ci_processing
openeuler-ci-bot
Jun 8 Comments：
Jun 8 Comments：
| Check Name | Build Result | Build Details | |
|---|---|---|---|
| check_binary_file | ✅SUCCESS | #37 | |
| check_package_yaml_file | ✅SUCCESS | ||
| check_repo_in_maintain | ✅SUCCESS | ||
| check_consistency | ✅SUCCESS | ||
| check_spec_file | ✅SUCCESS | ||
| x86_64 | check_build | ✅SUCCESS | #37 |
| check_install | ✅SUCCESS | ||
| check_license | ✅SUCCESS | ||
| aarch64 | check_build | ✅SUCCESS | #37 |
| check_install | ✅SUCCESS | ||
| check_license | ✅SUCCESS | ||
Jun 8 Added label: ci_successful
openeuler-ci-bot
Jun 8 Comments：
Jun 8 Comments：
当前PR是否有AI参与:
[x] 否
[ ] Yes
__1. AI Agent 平台:
__2. AI 模型 :
__3. Prompt 上下文 :
PR功能描述 / 为什么需要这个合入**:
CVE-2023-30549: User namespace isolation bypass in loadImages()
propagate namespace state. Without this, an attacker with container
launch access could escape user namespace restrictions.
CVE-2025-65105: SELinux/AppArmor enforcement bypass
is requested but not available on the system. Previously the code
would log a warning and continue without enforcement, allowing
containers to run without mandatory access control.
该PR关联的issue
(格式为fixes #<issue号>, 或者resolves #<issue号>): fixes #
https://atomgit.com/src-openeuler/apptainer/issues/4
https://atomgit.com/src-openeuler/apptainer/issues/8
希望检视人员了解: