Ubuntu
runc package

runc 1.1.7-0ubuntu2.2 source package in Ubuntu

Changelog

runc (1.1.7-0ubuntu2.2) mantic-security; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:41:08 +0530

Upload details

Uploaded by:
Nishit Majithia
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main misc
Mantic security main misc

Downloads

File Size SHA-256 Checksum
runc_1.1.7.orig.tar.xz 1.4 MiB 86444cc07461b81bbcb8d15c5fc2cad20afc64a70be0fc623073538aa91bafdd
runc_1.1.7-0ubuntu2.2.debian.tar.xz 17.8 KiB d1210c7a1b6e0c6e1c8a15aae3288d2917c3242d47d49542cb82f9942ce1ef6d
runc_1.1.7-0ubuntu2.2.dsc 2.2 KiB ba2c7e60a2f6b00ce2a239d3fe441daee2083b745f75e24d1cacb41ed7efd633

View changes file

Binary packages built by this source

golang-github-opencontainers-runc-dev: Open Container Project - development files

 "runc" is a command line client for running applications packaged according
 to the Open Container Format (OCF) and is a compliant implementation of
 the Open Container Project specification.
 .
 This package provides development files formerly known as
 "github.com/docker/libcontainer".

runc: Open Container Project - runtime

 "runc" is a command line client for running applications packaged according
 to the Open Container Format (OCF) and is a compliant implementation of
 the Open Container Project specification.

runc-dbgsym: debug symbols for runc