diff mbox series

package/runc: security bump to version 1.0.0-rc10

Message ID 20200205125042.31122-1-peter@korsgaard.com
State Accepted
Headers show
Series package/runc: security bump to version 1.0.0-rc10 | expand

Commit Message

Peter Korsgaard Feb. 5, 2020, 12:50 p.m. UTC
Fixes the following security vulnerability:

- CVE-2019-19921: runc volume mount race condition with shared mounts

For details see the announcement:
https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc10

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/runc/runc.hash | 2 +-
 package/runc/runc.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Comments

Peter Korsgaard March 10, 2020, 9:28 p.m. UTC | #1
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > Fixes the following security vulnerability:
 > - CVE-2019-19921: runc volume mount race condition with shared mounts

 > For details see the announcement:
 > https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc10

 > Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Committed to 2019.02.x and 2019.11.x, thanks.
diff mbox series

Patch

diff --git a/package/runc/runc.hash b/package/runc/runc.hash
index 3e8eff3cca..b895f6fccb 100644
--- a/package/runc/runc.hash
+++ b/package/runc/runc.hash
@@ -1,3 +1,3 @@ 
 # Locally computed
-sha256	2ec69c25df9f02c6fd38eb287145f8afba6772f809abe01df4534b5bfd68e8d4  runc-1.0.0-rc9.tar.gz
+sha256	6b44985023347fb9c5a2cc6f761df8c41cc2c84a7a68a6e6acf834dff6653a9a  runc-1.0.0-rc10.tar.gz
 sha256  552a739c3b25792263f731542238b92f6f8d07e9a488eae27e6c4690038a8243  LICENSE
diff --git a/package/runc/runc.mk b/package/runc/runc.mk
index acf61ab160..4c2f84ab16 100644
--- a/package/runc/runc.mk
+++ b/package/runc/runc.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-RUNC_VERSION = 1.0.0-rc9
+RUNC_VERSION = 1.0.0-rc10
 RUNC_SITE = $(call github,opencontainers,runc,v$(RUNC_VERSION))
 RUNC_LICENSE = Apache-2.0
 RUNC_LICENSE_FILES = LICENSE