From 389fc65931fb296c2779cf7486e4a3000ba53cb9 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Tue, 5 Apr 2022 19:28:14 +0200 Subject: [PATCH] package/containerd: security bump to version 1.5.11 Fixes the following security issues: - CVE-2022-23648: containerd CRI plugin: Insecure handling of image volumes https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7 - CVE-2022-24769: Default inheritable capabilities for linux container should be empty https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c Signed-off-by: Peter Korsgaard (cherry picked from commit 2642edb0af08f04fb98f4cb5f88895faded4b325) Signed-off-by: Peter Korsgaard --- package/containerd/containerd.hash | 2 +- package/containerd/containerd.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/containerd/containerd.hash b/package/containerd/containerd.hash index d5aafe2e70..23dacded88 100644 --- a/package/containerd/containerd.hash +++ b/package/containerd/containerd.hash @@ -1,3 +1,3 @@ # Computed locally -sha256 40c9767af3e87f2c36adf2f563f0a8374e80b30bd2b7aa80058c85912406cef4 containerd-1.5.9.tar.gz +sha256 6a289406c1c0583763e5a9754e31a1eced55cd5f162a7bc2a3a315d5eb05c7a1 containerd-1.5.11.tar.gz sha256 4bbe3b885e8cd1907ab4cf9a41e862e74e24b5422297a4f2fe524e6a30ada2b4 LICENSE diff --git a/package/containerd/containerd.mk b/package/containerd/containerd.mk index 8976e12f1a..c405b75e81 100644 --- a/package/containerd/containerd.mk +++ b/package/containerd/containerd.mk @@ -4,7 +4,7 @@ # ################################################################################ -CONTAINERD_VERSION = 1.5.9 +CONTAINERD_VERSION = 1.5.11 CONTAINERD_SITE = $(call github,containerd,containerd,v$(CONTAINERD_VERSION)) CONTAINERD_LICENSE = Apache-2.0 CONTAINERD_LICENSE_FILES = LICENSE