pool/runc
SHA256
14
0
Fork 1
Code Issues Pull Requests Activity

Accepting request 976494 from home:cyphar:docker

Browse Source 
- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-24769

 * A bug was found in runc where runc exec --cap executed processes with
   non-empty inheritable Linux process capabilities, creating an atypical Linux
   environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
   CVE-2022-29162.
 * `runc spec` no longer sets any inheritable capabilities in the created
   example OCI spec (`config.json`) file.

OBS-URL: https://build.opensuse.org/request/show/976494
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=123
This commit is contained in:
Aleksa Sarai
2022-05-11 23:03:17 +00:00
committed by Git OBS Bridge
parent c5a72d81b3
commit 2f40aa19ad
6 changed files with 38 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
runc.changes
View File

@@ -1,3 +1,17 @@
-------------------------------------------------------------------
Wed May 11 22:43:51 UTC 2022 - Aleksa Sarai <asarai@suse.com>
- Update to runc v1.1.2. Upstream changelog is available from
https://github.com/opencontainers/runc/releases/tag/v1.1.2.
CVE-2022-24769
* A bug was found in runc where runc exec --cap executed processes with
non-empty inheritable Linux process capabilities, creating an atypical Linux
environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
CVE-2022-29162.
* `runc spec` no longer sets any inheritable capabilities in the created
example OCI spec (`config.json`) file.
-------------------------------------------------------------------
Tue Mar 29 03:33:30 UTC 2022 - Aleksa Sarai <asarai@suse.com>