Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2021-30465 fixed in v1.0.0-rc95 #2

Open
pacoxu opened this issue Dec 6, 2021 · 0 comments · Fixed by #3
Open

CVE-2021-30465 fixed in v1.0.0-rc95 #2

pacoxu opened this issue Dec 6, 2021 · 0 comments · Fixed by #3

Comments

@pacoxu
Copy link
Member

pacoxu commented Dec 6, 2021

What happened?

https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95

What did you expect to happen?

This release of runc contains a fix for CVE-2021-30465, and users are
strongly recommended to update (especially if you are providing
semi-limited access to spawn containers to untrusted users).

Aside from this security fix, only a few other changes were made since
v1.0.0-rc94 (the only user-visible change was the addition of support
for defaultErrnoRet in seccomp profiles).

How can we reproduce it (as minimally and precisely as possible)?

GA

Anything else we need to know?

No response

@wzshiming wzshiming linked a pull request Dec 29, 2021 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant