0295e9602f
Fixes CVE-2022-29162 Minor security issue (which appears to not be exploitable) related to process capabilities. A bug was found in runc where runc exec --cap executed processes with ble Linux process capabilities, creating an atypical Linux environment. For more information, see GHSA-f3fp-gc8g-vw66 and CVE-2022-29162. runc spec no longer sets any inheritable capabilities in the created example OCI spec (config.json) file. https://github.com/opencontainers/runc/releases/tag/v1.1.2 Signed-off-by: Christian Stewart <christian@paral.in> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
4 lines
193 B
Plaintext
4 lines
193 B
Plaintext
# Locally computed
|
|
sha256 0ccce82b1d9c058d8fd7443d261c96fd7a803f2775bcb1fec2bdb725bc7640f6 runc-1.1.2.tar.gz
|
|
sha256 552a739c3b25792263f731542238b92f6f8d07e9a488eae27e6c4690038a8243 LICENSE
|