Skip to content

update runc binary to v1.1.12#47268

Merged
thaJeztah merged 1 commit intomoby:masterfrom
thaJeztah:bump_runc_binary_1.1.12
Jan 31, 2024
Merged

update runc binary to v1.1.12#47268
thaJeztah merged 1 commit intomoby:masterfrom
thaJeztah:bump_runc_binary_1.1.12

Conversation

@thaJeztah
Copy link
Copy Markdown
Member

Update the runc binary that's used in CI and for the static packages, which includes a fix for CVE-2024-21626.

- What I did

- How I did it

- How to verify it

- Description for the changelog

- A picture of a cute animal (not mandatory but encouraged)

Update the runc binary that's used in CI and for the static packages, which
includes a fix for [CVE-2024-21626].

- release notes: https://github.com/opencontainers/runc/releases/tag/v1.1.12
- full diff: opencontainers/runc@v1.1.11...v1.1.12

[CVE-2024-21626]: GHSA-xr7r-f8xq-vfvv

Signed-off-by: Sebastiaan van Stijn <[email protected]>
Copy link
Copy Markdown
Member

@laurazard laurazard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@thaJeztah
Copy link
Copy Markdown
Member Author

Failure is unrelated, and looks like we can ignore;

=== Failed
=== FAIL: amd64.integration.plugin.authz TestAuthZPluginV2Disable (8.97s)
    authz_plugin_v2_test.go:68: assertion failed: error is not nil: Error response from daemon: plugin "riyaz/authz-no-volume-plugin:latest" not found

@thaJeztah
Copy link
Copy Markdown
Member Author

Everything else is green; bringing this one in

@thaJeztah thaJeztah merged commit 7a920fd into moby:master Jan 31, 2024
@thaJeztah thaJeztah deleted the bump_runc_binary_1.1.12 branch January 31, 2024 21:50
@dmlause
Copy link
Copy Markdown

dmlause commented Jan 31, 2024

@thaJeztah - Is this PR going to be backported to 20.10 as well?

@thaJeztah
Copy link
Copy Markdown
Member Author

20.10 is EOL, so no backport there, but if you're running docker from deb or rpm packages, the runc binary is part of the containerd.io package, which is currently being published, so you can update the containerd.io package, to get a patched version of runc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants