runc 1.1.7-0ubuntu1~22.04.2 source package in Ubuntu

Changelog

runc (1.1.7-0ubuntu1~22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:40:36 +0530

Upload details

Uploaded by:
Nishit Majithia
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main misc
Jammy security main misc

Downloads

File Size SHA-256 Checksum
runc_1.1.7.orig.tar.xz 1.4 MiB 86444cc07461b81bbcb8d15c5fc2cad20afc64a70be0fc623073538aa91bafdd
runc_1.1.7-0ubuntu1~22.04.2.debian.tar.xz 17.8 KiB 3e71a79021bef20059dc70aa67658aa3ad6e057f799da00a7ca3118284c53d0a
runc_1.1.7-0ubuntu1~22.04.2.dsc 2.2 KiB 8f2865db130ac837b046b12a33fefc5a1aca3b0e69f429d543515b1bfd9f8727

View changes file

Binary packages built by this source

golang-github-opencontainers-runc-dev: Open Container Project - development files

 "runc" is a command line client for running applications packaged according
 to the Open Container Format (OCF) and is a compliant implementation of
 the Open Container Project specification.
 .
 This package provides development files formerly known as
 "github.com/docker/libcontainer".

runc: Open Container Project - runtime

 "runc" is a command line client for running applications packaged according
 to the Open Container Format (OCF) and is a compliant implementation of
 the Open Container Project specification.

runc-dbgsym: debug symbols for runc