Commit 25858d6

committed

update runc binary to v1.1.2

This is the second patch release of the runc 1.1 release branch. It fixes CVE-2022-29162, a minor security issue (which appears to not be exploitable) related to process capabilities. This is a similar bug to the ones found and fixed in Docker and containerd recently (CVE-2022-24769). - A bug was found in runc where runc exec --cap executed processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment. For more information, see GHSA-f3fp-gc8g-vw66 and CVE-2022-29162. - runc spec no longer sets any inheritable capabilities in the created example OCI spec (config.json) file. Signed-off-by: Sebastiaan van Stijn <[email protected]>

1 parent e85b5a0 commit 25858d6Copy full SHA for 25858d6

1 file changed

script/setup
- runc-version

`‎script/setup/runc-version‎`

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-v1.1.1`
	`1`	`+v1.1.2`

Comments

(0)