From bb89a115f8689610aade25503d1b2ea138c816dbd5b48e3390f977ea0fd15c4b Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Mon, 23 May 2022 03:24:41 +0000 Subject: [PATCH] Accepting request 978576 from home:cyphar:docker Fix CVE references. OBS-URL: https://build.opensuse.org/request/show/978576 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/runc?expand=0&rev=126 --- runc.changes | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/runc.changes b/runc.changes index 4957dad..1bb5bc4 100644 --- a/runc.changes +++ b/runc.changes @@ -16,14 +16,14 @@ Wed May 11 22:43:51 UTC 2022 - Aleksa Sarai - Update to runc v1.1.2. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.2. - CVE-2022-24769 + CVE-2022-29162 bsc#1199460 - * A bug was found in runc where runc exec --cap executed processes with - non-empty inheritable Linux process capabilities, creating an atypical Linux - environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and - CVE-2022-29162. - * `runc spec` no longer sets any inheritable capabilities in the created - example OCI spec (`config.json`) file. + * A bug was found in runc where runc exec --cap executed processes with + non-empty inheritable Linux process capabilities, creating an atypical Linux + environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and + CVE-2022-29162. bsc#1199460 + * `runc spec` no longer sets any inheritable capabilities in the created + example OCI spec (`config.json`) file. ------------------------------------------------------------------- Tue Mar 29 03:33:30 UTC 2022 - Aleksa Sarai