Format: 1.8
Date: Mon, 15 May 2023 13:20:53 +0200
Source: runc
Binary: runc
Built-For-Profiles: noudeb
Architecture: s390x
Version: 1.1.4-0ubuntu4
Distribution: mantic-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-s390x-014.buildd>
Changed-By: David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>
Description:
 runc       - Open Container Project - runtime
Changes:
 runc (1.1.4-0ubuntu4) mantic; urgency=medium
 .
   * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
     - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
       /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
       in libcontainer/rootfs_linux.go.
     - CVE-2023-25809
   * SECURITY UPDATE: Incorrect access control through /proc and /sys
     - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
       /sys to be symlinks in libcontainer/rootfs_linux.go.
     - CVE-2023-27561
     - CVE-2023-28642
Checksums-Sha1:
 338dca3583ed7f8438aa13380acca8a2734c22e6 6439132 runc-dbgsym_1.1.4-0ubuntu4_s390x.ddeb
 8d5c5fecc4d3a3aba63ab6cc24810dff22c022ca 5987 runc_1.1.4-0ubuntu4_s390x.buildinfo
 05840485270e5ac7bd64decdfa78b228e01041c8 4329630 runc_1.1.4-0ubuntu4_s390x.deb
Checksums-Sha256:
 a4c641bd2c3c6c9b7757f096ea85304dd65162f82d44c7ecee57905e263a502d 6439132 runc-dbgsym_1.1.4-0ubuntu4_s390x.ddeb
 4795491136816b927246b4529c4e118b207d058cfe4958ac8ddc46ce02e267a6 5987 runc_1.1.4-0ubuntu4_s390x.buildinfo
 968bd1b1fa15665d67bda71352a1b05665c4cc1437dc3ef426e0789019015ce5 4329630 runc_1.1.4-0ubuntu4_s390x.deb
Files:
 9fbc9a75e466f10ff7200966edd1107c 6439132 debug optional runc-dbgsym_1.1.4-0ubuntu4_s390x.ddeb
 607912cf7aa6f745b5a0e415a2375805 5987 devel optional runc_1.1.4-0ubuntu4_s390x.buildinfo
 028599307c4f5e68640aaeabf3f801bf 4329630 devel optional runc_1.1.4-0ubuntu4_s390x.deb
Original-Maintainer: Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>