I already have pending updates to the stacks that are in test now, they'll
be in place in the next week or so.

Bruce

On Wed, Mar 29, 2023, 10:49 PM Chen Qi <[email protected]> wrote:

> This upgrade fixes a few CVEs:
> - CVE-2023-27561
> - CVE-2023-25809
> - CVE-2023-28642
>
> Signed-off-by: Chen Qi <[email protected]>
> ---
>  recipes-containers/runc/runc-docker_git.bb         | 4 ++--
>  recipes-containers/runc/runc-opencontainers_git.bb | 4 ++--
>  2 files changed, 4 insertions(+), 4 deletions(-)
>
> diff --git a/recipes-containers/runc/runc-docker_git.bb
> b/recipes-containers/runc/runc-docker_git.bb
> index 7288ef0..9bed441 100644
> --- a/recipes-containers/runc/runc-docker_git.bb
> +++ b/recipes-containers/runc/runc-docker_git.bb
> @@ -2,13 +2,13 @@ include runc.inc
>
>  # Note: this rev is before the required protocol field, update when all
> components
>  #       have been updated to match.
> -SRCREV_runc-docker = "c6781d100a73d2dcef84e9376d85fff02235a2ed"
> +SRCREV_runc-docker = "f19387a6bec4944c770f7668ab51c4348d9c2f38"
>  SRC_URI = "git://
> github.com/opencontainers/runc;branch=release-1.1;name=runc-docker;protocol=https
> \
>             file://0001-runc-Add-console-socket-dev-null.patch \
>
> file://0001-Makefile-respect-GOBUILDFLAGS-for-runc-and-remove-re.patch \
>             file://0001-runc-docker-SIGUSR1-daemonize.patch \
>            "
>
> -RUNC_VERSION = "1.1.4"
> +RUNC_VERSION = "1.1.5"
>
>  CVE_PRODUCT = "runc"
> diff --git a/recipes-containers/runc/runc-opencontainers_git.bb
> b/recipes-containers/runc/runc-opencontainers_git.bb
> index 8d56ffc..235a01b 100644
> --- a/recipes-containers/runc/runc-opencontainers_git.bb
> +++ b/recipes-containers/runc/runc-opencontainers_git.bb
> @@ -1,10 +1,10 @@
>  include runc.inc
>
> -SRCREV = "c6781d100a73d2dcef84e9376d85fff02235a2ed"
> +SRCREV = "f19387a6bec4944c770f7668ab51c4348d9c2f38"
>  SRC_URI = " \
>      git://
> github.com/opencontainers/runc;branch=release-1.1;protocol=https \
>
>  file://0001-Makefile-respect-GOBUILDFLAGS-for-runc-and-remove-re.patch \
>      "
> -RUNC_VERSION = "1.1.4"
> +RUNC_VERSION = "1.1.5"
>
>  CVE_PRODUCT = "runc"
> --
> 2.37.1
>
>
> 
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#7969): 
https://lists.yoctoproject.org/g/meta-virtualization/message/7969
Mute This Topic: https://lists.yoctoproject.org/mt/97943449/21656
Group Owner: [email protected]
Unsubscribe: 
https://lists.yoctoproject.org/g/meta-virtualization/leave/6693005/21656/1014668956/xyzzy
 [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to