Publishing details

• Published on 2023-05-17
• Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by David Fernandez Gonzalez

Changelog

runc (1.1.4-0ubuntu1~18.04.2) bionic-security; urgency=medium

  * d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use
    device files such as /dev/null in containers (LP: #2013318)
  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Tue, 16 May 2023 12:07:05 +0200

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Built packages

• golang-github-opencontainers-runc-dev Open Container Project - development files

• runc Open Container Project - runtime

• runc-dbgsym debug symbols for runc

Package files

• golang-github-opencontainers-runc-dev_1.1.4-0ubuntu1~18.04.2_all.deb (1.1 MiB)
• runc-dbgsym_1.1.4-0ubuntu1~18.04.2_amd64.ddeb (3.6 MiB)
• runc-dbgsym_1.1.4-0ubuntu1~18.04.2_arm64.ddeb (3.4 MiB)
• runc-dbgsym_1.1.4-0ubuntu1~18.04.2_armhf.ddeb (3.4 MiB)
• runc-dbgsym_1.1.4-0ubuntu1~18.04.2_i386.ddeb (3.7 MiB)
• runc-dbgsym_1.1.4-0ubuntu1~18.04.2_ppc64el.ddeb (3.5 MiB)
• runc-dbgsym_1.1.4-0ubuntu1~18.04.2_s390x.ddeb (3.5 MiB)
• runc_1.1.4-0ubuntu1~18.04.2.debian.tar.xz (13.0 KiB)
• runc_1.1.4-0ubuntu1~18.04.2.dsc (2.4 KiB)
• runc_1.1.4-0ubuntu1~18.04.2_amd64.deb (3.6 MiB)
• runc_1.1.4-0ubuntu1~18.04.2_arm64.deb (3.1 MiB)
• runc_1.1.4-0ubuntu1~18.04.2_armhf.deb (3.1 MiB)
• runc_1.1.4-0ubuntu1~18.04.2_i386.deb (3.5 MiB)
• runc_1.1.4-0ubuntu1~18.04.2_ppc64el.deb (3.1 MiB)
• runc_1.1.4-0ubuntu1~18.04.2_s390x.deb (3.4 MiB)
• runc_1.1.4.orig.tar.xz (1.3 MiB)