Look further, there's two commits. 1.11 and 1.12. https://git.yoctoproject.org/meta-virtualization/commit/?h=master-next&id=9213f05f5591b499809b81a46b8d05e10935f001
I didn't bump runc-docker, since it is going away. Bruce On Tue, Mar 19, 2024 at 12:28 PM Thomas Schlien <t...@ferncast.de> wrote: > > Hi, > > I had a look at master-next and it only contains version 1.1.11, but not > 1.1.12 with the CVE patches. > > Best regards, > Thomas > > On 19.03.24 16:58, Bruce Ashfield wrote: > > master-next is already updated to that version. > > > > The stack is ongoing release testing, but I do expect to push master > > shortly. > > > > Bruce > > > > On Tue, Mar 19, 2024 at 11:54 AM Thomas Schlien <t...@ferncast.de> wrote: > >> CVE-2024-21626 > >> https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv > >> --- > >> recipes-containers/runc/runc-opencontainers_git.bb | 4 ++-- > >> 1 file changed, 2 insertions(+), 2 deletions(-) > >> > >> diff --git a/recipes-containers/runc/runc-opencontainers_git.bb > >> b/recipes-containers/runc/runc-opencontainers_git.bb > >> index 61e7cfa6..88964276 100644 > >> --- a/recipes-containers/runc/runc-opencontainers_git.bb > >> +++ b/recipes-containers/runc/runc-opencontainers_git.bb > >> @@ -1,11 +1,11 @@ > >> include runc.inc > >> > >> -SRCREV = "f3446b1e5fe75bf419c808d8705c899ab4968b6e" > >> +SRCREV = "51d5e94601ceffbbd85688df1c928ecccbfa4685" > >> SRC_URI = " \ > >> > >> git://github.com/opencontainers/runc;branch=release-1.1;protocol=https \ > >> > >> file://0001-Makefile-respect-GOBUILDFLAGS-for-runc-and-remove-re.patch \ > >> " > >> -RUNC_VERSION = "1.1.10" > >> +RUNC_VERSION = "1.1.12" > >> > >> CVE_PRODUCT = "runc" > >> > >> -- > >> 2.40.1 > >> > >> > >> > >> > > > > > > > > > -- > Dr.-Ing. Thomas Schlien > Ferncast GmbH > Gallierstr. 41a, 52074 Aachen > Germany > > Phone: +49 241 99034567 > Web: www.ferncast.de > -- > CEO: Detlef Wiese > Court of Registration: Amtsgericht Aachen > Commercial Register: HRB 22350 > > > > -- - Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end - "Use the force Harry" - Gandalf, Star Trek II
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#8649): https://lists.yoctoproject.org/g/meta-virtualization/message/8649 Mute This Topic: https://lists.yoctoproject.org/mt/105026590/21656 Group Owner: meta-virtualization+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-