From f002280e73fded677b1d7476f928d1bc0ee56359 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Mon, 10 Apr 2023 23:09:54 +0200 Subject: [PATCH] package/containerd: security bump to version 1.5.18 Fixes the following security issues: - CVE-2023-25153: Fix OCI image importer memory exhaustion https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2 - CVE-2023-25173: Fix supplementary groups not being set up properly https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p https://github.com/containerd/containerd/releases/tag/v1.5.18 Signed-off-by: Peter Korsgaard --- package/containerd/containerd.hash | 2 +- package/containerd/containerd.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/containerd/containerd.hash b/package/containerd/containerd.hash index ced95f2aff..007a42e7b1 100644 --- a/package/containerd/containerd.hash +++ b/package/containerd/containerd.hash @@ -1,3 +1,3 @@ # Computed locally -sha256 d14c703ea6d60a45ef2db8f2275ddae6a3538305117c7813fa24dcf12f4b7d85 containerd-1.5.16.tar.gz +sha256 489ee6b179bf2f0d7f7ac23da4973081cfc95db45231d3fd1e34f7adebe4573b containerd-1.5.18.tar.gz sha256 4bbe3b885e8cd1907ab4cf9a41e862e74e24b5422297a4f2fe524e6a30ada2b4 LICENSE diff --git a/package/containerd/containerd.mk b/package/containerd/containerd.mk index aa5e89df03..3b5eab9e68 100644 --- a/package/containerd/containerd.mk +++ b/package/containerd/containerd.mk @@ -4,7 +4,7 @@ # ################################################################################ -CONTAINERD_VERSION = 1.5.16 +CONTAINERD_VERSION = 1.5.18 CONTAINERD_SITE = $(call github,containerd,containerd,v$(CONTAINERD_VERSION)) CONTAINERD_LICENSE = Apache-2.0 CONTAINERD_LICENSE_FILES = LICENSE