Skip to content

Patch moby-runc to address CVE-2024-21626#7578

Merged
jslobodzian merged 4 commits intofasttrack/2.0from
joslobo/CVE-2024-21626
Jan 31, 2024
Merged

Patch moby-runc to address CVE-2024-21626#7578
jslobodzian merged 4 commits intofasttrack/2.0from
joslobo/CVE-2024-21626

Conversation

@jslobodzian
Copy link
Copy Markdown
Collaborator

Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)

  • The toolchain has been rebuilt successfully (or no changes were made to it)
  • The toolchain/worker package manifests are up-to-date
  • Any updated packages successfully build (or no packages were changed)
  • Packages depending on static components modified in this PR (Golang, *-static subpackages, etc.) have had their Release tag incremented.
  • Package tests (%check section) have been verified with RUN_CHECK=y for existing SPEC files, or added to new SPEC files
  • All package sources are available
  • cgmanifest files are up-to-date and sorted (./cgmanifest.json, ./toolkit/scripts/toolchain/cgmanifest.json, .github/workflows/cgmanifest.json)
  • LICENSE-MAP files are up-to-date (./SPECS/LICENSES-AND-NOTICES/data/licenses.json, ./SPECS/LICENSES-AND-NOTICES/LICENSES-MAP.md, ./SPECS/LICENSES-AND-NOTICES/LICENSE-EXCEPTIONS.PHOTON)
  • All source files have up-to-date hashes in the *.signatures.json files
  • sudo make go-tidy-all and sudo make go-test-coverage pass
  • Documentation has been updated to match any changes to the build system
  • Ready to merge
Summary

Fixes CVE-2024-21626

Does this affect the toolchain?

NO

mfrw and others added 3 commits January 29, 2024 05:53
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
@jslobodzian jslobodzian requested a review from a team as a code owner January 31, 2024 20:12
@jslobodzian jslobodzian merged commit af8ee0f into fasttrack/2.0 Jan 31, 2024
@jslobodzian jslobodzian deleted the joslobo/CVE-2024-21626 branch January 31, 2024 21:40
CBL-Mariner-Bot pushed a commit that referenced this pull request Jan 31, 2024
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
(cherry picked from commit af8ee0f)
@CBL-Mariner-Bot
Copy link
Copy Markdown
Collaborator

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants