mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 08:14:09 -09:00
package/runc: security bump to v1.2.9
Fixes the following security issues (in v1.2.8): - CVE-2025-31133: container escape via "masked path" abuse due to mount race conditions https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2 - CVE-2025-52565: container escape with malicious config due to /dev/console mount and related races https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r - CVE-2025-52881: container escape and denial of service due to arbitrary write gadgets and procfs write redirects https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm There are also numerous bugfixes. See the releases notes: - https://github.com/opencontainers/runc/releases/v1.2.5 - https://github.com/opencontainers/runc/releases/v1.2.6 - https://github.com/opencontainers/runc/releases/v1.2.7 - https://github.com/opencontainers/runc/releases/v1.2.8 - https://github.com/opencontainers/runc/releases/v1.2.9 Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
committed by
Thomas Perale
parent
477c5c0510
commit
b347285b1d
@@ -1,3 +1,3 @@
|
||||
# Locally computed
|
||||
sha256 9785c144c97974b52b6091b7a79168b73681ff574bc8438b44f3f5f8c112f171 runc-1.2.4-go2.tar.gz
|
||||
sha256 8e298469fc729d37920a7ee45c7cd587a4139149abccca485e08d616b80d2fad runc-1.2.9-go2.tar.gz
|
||||
sha256 552a739c3b25792263f731542238b92f6f8d07e9a488eae27e6c4690038a8243 LICENSE
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
#
|
||||
################################################################################
|
||||
|
||||
RUNC_VERSION = 1.2.4
|
||||
RUNC_VERSION = 1.2.9
|
||||
RUNC_SITE = $(call github,opencontainers,runc,v$(RUNC_VERSION))
|
||||
RUNC_LICENSE = Apache-2.0, LGPL-2.1 (libseccomp)
|
||||
RUNC_LICENSE_FILES = LICENSE
|
||||
|
||||
Reference in New Issue
Block a user