Skip to content
This repository was archived by the owner on Jul 11, 2023. It is now read-only.

Patch runc security issue by upgrading to v1.1.2 #4760

Merged
merged 2 commits into from
May 25, 2022

Conversation

trstringer
Copy link
Contributor

Resolves CVE-2022-29162 by upgrading runc to v1.1.2.

Signed-off-by: Thomas Stringer [email protected]

Description:

Testing done:

Affected area:

Functional Area
New Functionality [ ]
CI System [ ]
CLI Tool [ ]
Certificate Management [ ]
Control Plane [ ]
Demo [ ]
Documentation [ ]
Egress [ ]
Ingress [ ]
Install [ ]
Networking [ ]
Observability [ ]
Performance [ ]
SMI Policy [ ]
Security [ ]
Sidecar Injection [ ]
Tests [ ]
Upgrade [ ]
Other [ ]

Please answer the following questions with yes/no.

  1. Does this change contain code from or inspired by another project?

    • Did you notify the maintainers and provide attribution?
  2. Is this a breaking change?

  3. Has documentation corresponding to this change been updated in the osm-docs repo (if applicable)?

Resolves CVE-2022-29162 by upgrading runc to v1.1.2.

Signed-off-by: Thomas Stringer <[email protected]>
Signed-off-by: Thomas Stringer <[email protected]>
@codecov-commenter
Copy link

Codecov Report

Merging #4760 (78f0686) into main (ecc4e67) will increase coverage by 0.01%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #4760      +/-   ##
==========================================
+ Coverage   68.96%   68.98%   +0.01%     
==========================================
  Files         227      227              
  Lines       16454    16454              
==========================================
+ Hits        11348    11350       +2     
+ Misses       5054     5052       -2     
  Partials       52       52              
Flag Coverage Δ
unittests 68.98% <ø> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
pkg/certificate/manager.go 92.66% <0.00%> (+1.83%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a241cba...78f0686. Read the comment docs.

@jaellio jaellio merged commit 21d3e60 into openservicemesh:main May 25, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants