mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-09 17:03:35 -09:00
d5a067ef22
For more information on the version bump, see:
- https://github.com/containerd/containerd/releases/tag/v2.0.7
- https://github.com/containerd/containerd/releases/tag/v2.0.6
- https://github.com/containerd/containerd/releases/tag/v2.0.5
- https://github.com/containerd/containerd/releases/tag/v2.0.4
- https://github.com/containerd/containerd/releases/tag/v2.0.3
Fixes the following vulnerabilities:
- CVE-2024-25621:
Versions 2.0.0-beta.0 through 2.0.6 have an overly broad default
permission vulnerability. Directory paths `/var/lib/containerd`,
`/run/containerd/io.containerd.grpc.v1.cri` and
`/run/containerd/io.containerd.sandbox.controller.v1.shim` were all
created with incorrect permissions.
https://www.cve.org/CVERecord?id=CVE-2024-25621
- CVE-2024-40635:
A bug was found in containerd prior to versions 2.0.4 where
containers launched with a User set as a `UID:GID` larger than the
maximum 32-bit signed integer can cause an overflow condition where
the container ultimately runs as root (UID 0). This could cause
unexpected behavior for environments that require containers to run
as a non-root user.
https://www.cve.org/CVERecord?id=CVE-2024-40635
- CVE-2025-47291:
A bug was found in the containerd's CRI implementation where
containerd, starting in version 2.0.1 and prior to version 2.0.5,
doesn't put usernamespaced containers under the Kubernetes' cgroup
hierarchy, therefore some Kubernetes limits are not honored. This
may cause a denial of service of the Kubernetes node.
https://www.cve.org/CVERecord?id=CVE-2025-47291
- CVE-2025-64329:
Versions 2.0.0-beta.0 through 2.0.6 contain a bug in the CRI Attach
implementation where a user can exhaust memory on the host due to
goroutine leaks.
https://www.cve.org/CVERecord?id=CVE-2025-64329
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 49e180d3d5)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches