Skip to content

Commit

Permalink
update runc binary to v1.1.2
Browse files Browse the repository at this point in the history
This is the second patch release of the runc 1.1 release branch. It
fixes CVE-2022-29162, a minor security issue (which appears to not be
exploitable) related to process capabilities.

This is a similar bug to the ones found and fixed in Docker and
containerd recently (CVE-2022-24769).

- A bug was found in runc where runc exec --cap executed processes with
  non-empty inheritable Linux process capabilities, creating an atypical Linux
  environment. For more information, see GHSA-f3fp-gc8g-vw66 and CVE-2022-29162.
- runc spec no longer sets any inheritable capabilities in the created
  example OCI spec (config.json) file.

Signed-off-by: Sebastiaan van Stijn <[email protected]>
(cherry picked from commit 25858d6)
Signed-off-by: Sebastiaan van Stijn <[email protected]>
  • Loading branch information
thaJeztah committed May 13, 2022
1 parent 61ac3ae commit c2f7933
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion script/setup/runc-version
Original file line number Diff line number Diff line change
@@ -1 +1 @@
v1.1.1
v1.1.2

0 comments on commit c2f7933

Please sign in to comment.