Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: upgrade the version of runc to avoid security risk #1972

Merged
merged 1 commit into from
Mar 27, 2024

Conversation

qclc
Copy link
Member

@qclc qclc commented Mar 7, 2024

What type of PR is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespace from that line:
/kind bug
/kind documentation
/kind enhancement
/kind good-first-issue
/kind feature
/kind question
/kind design
/sig ai
/sig iot
/sig network
/sig storage

What this PR does / why we need it:

The runc(1.1.5) package indirectly imported by openyurt has some security risks before version 1.1.11, so the minor version number of the runc package is upgraded to version 1.1.12.

For specific details of security risks, please refer to: summary

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?


other Note

Copy link

codecov bot commented Mar 7, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 53.05%. Comparing base (c589f8a) to head (5db754c).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #1972   +/-   ##
=======================================
  Coverage   53.05%   53.05%           
=======================================
  Files         176      176           
  Lines       20944    20944           
=======================================
  Hits        11112    11112           
  Misses       8884     8884           
  Partials      948      948           
Flag Coverage Δ
unittests 53.05% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link

sonarcloud bot commented Mar 27, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

@Congrool
Copy link
Member

/lgtm
/approve

@Congrool Congrool merged commit 525a0f7 into openyurtio:master Mar 27, 2024
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants