From 3a8d8a65511ba6e53ccadb4b7c7a4a0f787498d6 Mon Sep 17 00:00:00 2001 From: Christian Stewart Date: Tue, 6 Feb 2024 18:32:25 -0800 Subject: [PATCH] package/runc: security bump to version v1.1.12 Fixes the following vulnerabilities: - CVE-2024-21626: runc vulnerable to container breakout through process.cwd trickery and leaked fds https://github.com/advisories/GHSA-xr7r-f8xq-vfvv https://github.com/opencontainers/runc/releases/tag/v1.1.12 Signed-off-by: Christian Stewart Signed-off-by: Peter Korsgaard (cherry picked from commit c0b5beea44005a38ab563067fedbe27a0c015cd5) Signed-off-by: Peter Korsgaard --- package/runc/runc.hash | 2 +- package/runc/runc.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/runc/runc.hash b/package/runc/runc.hash index 5ffd21a5dd..d6eb27d352 100644 --- a/package/runc/runc.hash +++ b/package/runc/runc.hash @@ -1,3 +1,3 @@ # Locally computed -sha256 509993674481aad7e14aedfb280e0eb160f3a34c0b77e2e98c4b3c0b1df76894 runc-1.1.9.tar.gz +sha256 be31b07d6a54a8f234016501c300ad04b6c428c56588e7eca8c3b663308db208 runc-1.1.12.tar.gz sha256 552a739c3b25792263f731542238b92f6f8d07e9a488eae27e6c4690038a8243 LICENSE diff --git a/package/runc/runc.mk b/package/runc/runc.mk index 62e117685a..273509b860 100644 --- a/package/runc/runc.mk +++ b/package/runc/runc.mk @@ -4,7 +4,7 @@ # ################################################################################ -RUNC_VERSION = 1.1.9 +RUNC_VERSION = 1.1.12 RUNC_SITE = $(call github,opencontainers,runc,v$(RUNC_VERSION)) RUNC_LICENSE = Apache-2.0, LGPL-2.1 (libseccomp) RUNC_LICENSE_FILES = LICENSE