Thanks to visit codestin.com
Credit goes to github.com

Skip to content

[1.26] Bump runc/libcontainer to 1.1.6 #117681

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 2 commits into from
Closed

[1.26] Bump runc/libcontainer to 1.1.6 #117681

wants to merge 2 commits into from

Conversation

kolyshkin
Copy link
Contributor

@kolyshkin kolyshkin commented Apr 28, 2023 •
edited
Loading

Cherry pick of #117242 on release-1.26.

Modifies: #117647

#117242: CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5

For details on the cherry pick process, see the cherry pick requests page.

* CVE-2023-27561 CVE-2023-25809 CVE-2023-28642: Bump fix runc v1.1.4 -> v1.1.5
* Fixed cgroup removal error when using runc binary >= 1.1.6

@k8s-ci-robot k8s-ci-robot added this to the v1.26 milestone Apr 28, 2023
@k8s-ci-robot k8s-ci-robot added do-not-merge/cherry-pick-not-approved Indicates that a PR is not yet approved to merge into a release branch. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Apr 28, 2023
@k8s-ci-robot
Copy link
Contributor

This cherry pick PR is for a release branch and has not yet been approved by Release Managers.
Adding the do-not-merge/cherry-pick-not-approved label.

To merge this cherry pick, it must first be approved (/lgtm + /approve) by the relevant OWNERS.

If you didn't cherry-pick this change to all supported release branches, please leave a comment describing why other cherry-picks are not needed to speed up the review process.

If you're not sure is it required to cherry-pick this change to all supported release branches, please consult the cherry-pick guidelines document.

AFTER it has been approved by code owners, please leave the following comment on a line by itself, with no leading whitespace: /cc kubernetes/release-managers

(This command will request a cherry pick review from Release Managers and should work for all GitHub users, whether they are members of the Kubernetes GitHub organization or not.)

For details on the patch release process and schedule, see the Patch Releases page.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. do-not-merge/needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. needs-priority Indicates a PR lacks a `priority/foo` label and requires one. labels Apr 28, 2023
@k8s-ci-robot k8s-ci-robot requested review from dims, logicalhan and a team April 28, 2023 23:32
@k8s-ci-robot k8s-ci-robot added the area/dependency Issues or PRs related to dependency changes label Apr 28, 2023
@kolyshkin kolyshkin changed the title Automated cherry pick of #117242: CVE-2023-27561: Bump runc go module v1.1.4 -> v1.1.5 [1.26] Bump runc/libcontainer to 1.1.6 Apr 28, 2023
@k8s-ci-robot k8s-ci-robot added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Apr 28, 2023
@kolyshkin
Copy link
Contributor Author

/sig node
/priority important-soon

@k8s-ci-robot k8s-ci-robot added sig/node Categorizes an issue or PR as relevant to SIG Node. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. and removed do-not-merge/needs-sig Indicates an issue or PR lacks a `sig/foo` label and requires one. needs-priority Indicates a PR lacks a `priority/foo` label and requires one. labels Apr 28, 2023
@haircommander @kolyshkin
vendor: bump runc to 1.1.6
98aca90 
Signed-off-by: Peter Hunt <[email protected]>
Signed-off-by: Kir Kolyshkin <[email protected]>
@kolyshkin kolyshkin force-pushed the automated-cherry-pick-of-#117242-origin-release-1.26 branch from bc7830e to 98aca90 Compare April 28, 2023 23:54
@k8s-ci-robot k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. area/apiserver area/cloudprovider area/code-generation area/kubectl sig/api-machinery Categorizes an issue or PR as relevant to SIG API Machinery. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Apr 28, 2023
@k8s-ci-robot k8s-ci-robot added sig/architecture Categorizes an issue or PR as relevant to SIG Architecture. sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/cli Categorizes an issue or PR as relevant to SIG CLI. sig/cloud-provider Categorizes an issue or PR as relevant to SIG Cloud Provider. sig/cluster-lifecycle Categorizes an issue or PR as relevant to SIG Cluster Lifecycle. sig/instrumentation Categorizes an issue or PR as relevant to SIG Instrumentation. sig/storage Categorizes an issue or PR as relevant to SIG Storage. labels Apr 28, 2023
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: kolyshkin
Once this PR has been reviewed and has the lgtm label, please assign deads2k, lavalamp, nckturner, sttts for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kolyshkin kolyshkin mentioned this pull request Apr 29, 2023
Closed
@dims
Copy link
Member

dims commented Apr 29, 2023

/kind bug

@k8s-ci-robot k8s-ci-robot added kind/bug Categorizes issue or PR as related to a bug. and removed do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. labels Apr 29, 2023
@dims
Copy link
Member

dims commented Apr 29, 2023

/retest

@dims
Copy link
Member

dims commented Apr 29, 2023

xref: #117647

@dims
Copy link
Member

dims commented Apr 29, 2023

/assign @mrunalp @SergeyKanzhelev @liggitt

@dims
Copy link
Member

dims commented Apr 30, 2023

@kolyshkin i filed another one here #117691

@bart0sh
Copy link
Contributor

bart0sh commented Apr 30, 2023

/triage accepted
/priority important-soon
/cc
/retest

@k8s-ci-robot k8s-ci-robot requested a review from bart0sh April 30, 2023 09:28
@k8s-ci-robot k8s-ci-robot added triage/accepted Indicates an issue or PR is ready to be actively worked on. and removed needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. labels Apr 30, 2023
@k8s-ci-robot
Copy link
Contributor

@kolyshkin: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-kubernetes-verify-govet-levee 98aca90 link true /test pull-kubernetes-verify-govet-levee
pull-kubernetes-unit 98aca90 link true /test pull-kubernetes-unit
pull-kubernetes-typecheck 98aca90 link true /test pull-kubernetes-typecheck
pull-kubernetes-unit-go-compatibility 98aca90 link false /test pull-kubernetes-unit-go-compatibility
pull-kubernetes-dependencies 98aca90 link true /test pull-kubernetes-dependencies
pull-kubernetes-verify 98aca90 link true /test pull-kubernetes-verify

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@dims
Copy link
Member

dims commented Apr 30, 2023

@kolyshkin let's use #117691 - presubmit tests pass there.

/close

@k8s-ci-robot
Copy link
Contributor

@dims: Closed this PR.

In response to this:

@kolyshkin let's use #117691 - presubmit tests pass there.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@dims dims mentioned this pull request Apr 30, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dims dims Awaiting requested review from dims

@logicalhan logicalhan Awaiting requested review from logicalhan

@bart0sh bart0sh Awaiting requested review from bart0sh

Assignees

@mrunalp mrunalp

@liggitt liggitt

@SergeyKanzhelev SergeyKanzhelev

Labels
area/apiserver area/cloudprovider area/code-generation area/dependency Issues or PRs related to dependency changes area/kubectl cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. do-not-merge/cherry-pick-not-approved Indicates that a PR is not yet approved to merge into a release branch. kind/bug Categorizes issue or PR as related to a bug. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. release-note Denotes a PR that will be considered when it comes time to generate release notes. sig/api-machinery Categorizes an issue or PR as relevant to SIG API Machinery. sig/architecture Categorizes an issue or PR as relevant to SIG Architecture. sig/auth Categorizes an issue or PR as relevant to SIG Auth. sig/cli Categorizes an issue or PR as relevant to SIG CLI. sig/cloud-provider Categorizes an issue or PR as relevant to SIG Cloud Provider. sig/cluster-lifecycle Categorizes an issue or PR as relevant to SIG Cluster Lifecycle. sig/instrumentation Categorizes an issue or PR as relevant to SIG Instrumentation. sig/node Categorizes an issue or PR as relevant to SIG Node. sig/storage Categorizes an issue or PR as relevant to SIG Storage. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. triage/accepted Indicates an issue or PR is ready to be actively worked on.
Projects
SIG Auth
Archived in project
SIG Node: code and documentation PRs
Archived in project
Milestone
v1.26
Development

Successfully merging this pull request may close these issues.
9 participants
@kolyshkin @k8s-ci-robot @dims @bart0sh @mrunalp @liggitt @SergeyKanzhelev @PushkarJ @haircommander