diff options
| author | Peter Korsgaard <peter@korsgaard.com> | 2017-01-22 22:39:56 +0100 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2017-01-23 19:07:48 +1100 |
| commit | d6706dc430ebb1dade6f90a8d45503c23abec99d (patch) | |
| tree | e8ad51d763c2dd1ef2f46d964c645f47b398092d /package/runc | |
| parent | 157ddf77e403c6ee00faef44fc32f8f679964204 (diff) | |
runc: security bump to fix CVE-2016-9962
RunC allowed additional container processes via runc exec to be ptraced by
the pid 1 of the container. This allows the main processes of the
container, if running as root, to gain access to file-descriptors of these
new processes during the initialization and can lead to container escapes or
modification of runC state before the process is fully placed inside the
container.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/runc')
| -rw-r--r-- | package/runc/runc.hash | 2 | ||||
| -rw-r--r-- | package/runc/runc.mk | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/package/runc/runc.hash b/package/runc/runc.hash index 5b5400eee..0b6a24ffc 100644 --- a/package/runc/runc.hash +++ b/package/runc/runc.hash @@ -1,2 +1,2 @@ # Locally computed -sha256 638742c48426b9a3281aeb619e27513d972de228bdbd43b478baea99c186d491 runc-v1.0.0-rc2.tar.gz +sha256 374822cc2895ed3899b7a3a03b566413ea782fccec1307231f27894e9c6d5bea runc-50a19c6ff828c58e5dab13830bd3dacde268afe5.tar.gz diff --git a/package/runc/runc.mk b/package/runc/runc.mk index 661872c96..95afcaaff 100644 --- a/package/runc/runc.mk +++ b/package/runc/runc.mk @@ -4,7 +4,7 @@ # ################################################################################ -RUNC_VERSION = v1.0.0-rc2 +RUNC_VERSION = 50a19c6ff828c58e5dab13830bd3dacde268afe5 RUNC_SITE = $(call github,opencontainers,runc,$(RUNC_VERSION)) RUNC_LICENSE = Apache-2.0 RUNC_LICENSE_FILES = LICENSE |