aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Peter Korsgaard <peter@korsgaard.com>2017-01-22 22:39:56 +0100
committerGravatar Peter Korsgaard <peter@korsgaard.com>2017-01-23 15:51:32 +0100
commitb13040fa27baf8fcb412aca3624fd1426ab598cc (patch)
tree42e889b2d6bb4585f628cff23db2d31166b4f3a4
parentc54287b52727597e819041b53f350fa5ab984249 (diff)
downloadbuildroot-b13040fa27baf8fcb412aca3624fd1426ab598cc.tar.gz
buildroot-b13040fa27baf8fcb412aca3624fd1426ab598cc.tar.bz2
runc: security bump to fix CVE-2016-9962
RunC allowed additional container processes via runc exec to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or modification of runC state before the process is fully placed inside the container. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> (cherry picked from commit d6706dc430ebb1dade6f90a8d45503c23abec99d)
-rw-r--r--package/runc/runc.hash2
-rw-r--r--package/runc/runc.mk2
2 files changed, 2 insertions, 2 deletions
diff --git a/package/runc/runc.hash b/package/runc/runc.hash
index 5b5400eeea..0b6a24ffcb 100644
--- a/package/runc/runc.hash
+++ b/package/runc/runc.hash
@@ -1,2 +1,2 @@
# Locally computed
-sha256 638742c48426b9a3281aeb619e27513d972de228bdbd43b478baea99c186d491 runc-v1.0.0-rc2.tar.gz
+sha256 374822cc2895ed3899b7a3a03b566413ea782fccec1307231f27894e9c6d5bea runc-50a19c6ff828c58e5dab13830bd3dacde268afe5.tar.gz
diff --git a/package/runc/runc.mk b/package/runc/runc.mk
index 661872c962..95afcaaff8 100644
--- a/package/runc/runc.mk
+++ b/package/runc/runc.mk
@@ -4,7 +4,7 @@
#
################################################################################
-RUNC_VERSION = v1.0.0-rc2
+RUNC_VERSION = 50a19c6ff828c58e5dab13830bd3dacde268afe5
RUNC_SITE = $(call github,opencontainers,runc,$(RUNC_VERSION))
RUNC_LICENSE = Apache-2.0
RUNC_LICENSE_FILES = LICENSE