Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

thaJeztah
Copy link
Member

@thaJeztah thaJeztah commented Sep 3, 2024

Update the runc binary that's used in CI and for the static packages.

diff: opencontainers/runc@v1.1.13...v1.1.14

Release Notes:

  • Fix CVE-2024-45310 / GHSA-jfvp-7x6p-h2pv, a low-severity attack that allowed maliciously configured containers to create empty files and directories on the host.
  • Add support for Go 1.23.
  • Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
  • rootfs: consolidate mountpoint creation logic.

- What I did

- How I did it

- How to verify it

- Description for the changelog

Upgrade `runc` to [v1.1.14](https://github.com/opencontainers/runc/releases/tag/v1.1.14), which contains a fix for [CVE-2024-45310](https://github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv).

- A picture of a cute animal (not mandatory but encouraged)

Update the runc binary that's used in CI and for the static packages.

diff: opencontainers/runc@v1.1.13...v1.1.14

Release Notes:

- Fix CVE-2024-45310, a low-severity attack that allowed maliciously configured containers to create empty files and directories on the host.
- Add support for Go 1.23.
- Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
- rootfs: consolidate mountpoint creation logic.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
@laurazard
Copy link
Member

@thaJeztah fixed up the description/changelog which mentioned runc v1.1.13 instead of v1.1.14.

@thaJeztah
Copy link
Member Author

DOH! thanks for that! I copy/pasta'd from a previous PR so that I would use the same wording 😂

@thaJeztah thaJeztah merged commit f9bac83 into moby:master Sep 3, 2024
166 checks passed
@thaJeztah thaJeztah deleted the bump_runc_1.1.14 branch September 3, 2024 14:11
@thaJeztah thaJeztah added the area/runtime Runtime label Sep 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants