From c2b9970241047040cdaa7e2c165c2b807cd026a4 Mon Sep 17 00:00:00 2001 From: Christoph Ostarek Date: Fri, 2 Feb 2024 15:38:47 +0100 Subject: [PATCH] runc: bump to newest version This version includes a fix for CVE-2024-21626 which allowed an attacker in bad circumstances to "escape containerized environments". See also https://access.redhat.com/security/cve/cve-2024-21626 Signed-off-by: Christoph Ostarek --- pkg/runc/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/runc/Dockerfile b/pkg/runc/Dockerfile index 8036ab257..24966a4ba 100644 --- a/pkg/runc/Dockerfile +++ b/pkg/runc/Dockerfile @@ -13,7 +13,7 @@ RUN \ make \ && true ENV GOPATH=/go PATH=$PATH:/go/bin GO111MODULE=off -ENV RUNC_COMMIT=v1.1.0 +ENV RUNC_COMMIT=v1.1.12 RUN mkdir -p $GOPATH/src/github.com/opencontainers && \ cd $GOPATH/src/github.com/opencontainers && \ git clone https://github.com/opencontainers/runc.git