runc 1.1.10+ds1-1ubuntu2 source package in Ubuntu

Changelog

runc (1.1.10+ds1-1ubuntu2) noble; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:41:53 +0530

Upload details

Uploaded by:
Nishit Majithia
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Noble: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
runc_1.1.10+ds1.orig.tar.xz 510.8 KiB e5f086d8b2de2c82a29e793b20a848ec0652d7bec0aa78c7b504e5df0986c9c7
runc_1.1.10+ds1-1ubuntu2.debian.tar.xz 22.0 KiB fb8bc3f80258a3190746cc13c494830b7679765ae47bf2d1bb8d60e08256dcbc
runc_1.1.10+ds1-1ubuntu2.dsc 2.8 KiB ea09623b94ccf4d49392e2b9bd80cf7d396ddead1c6350cfa22481bdaf9af0dc

View changes file

Binary packages built by this source

golang-github-opencontainers-runc-dev: Open Container Project - development files

 "runc" is a command line client for running applications packaged according
 to the Open Container Format (OCF) and is a compliant implementation of
 the Open Container Project specification.
 .
 This package provides development files formerly known as
 "github.com/docker/libcontainer".