GNU bug report logs - #69080
[PATCH] gnu: runc: Update to 1.1.12 [security fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 69080 in the body.
You can then email your comments to 69080 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Tomas Volf <~@wolfsden.cz>
To: guix-patches <at> gnu.org
Cc: Tomas Volf <~@wolfsden.cz>
Subject: [PATCH] gnu: runc: Update to 1.1.12 [security fixes].
Date: Mon, 12 Feb 2024 18:29:38 +0100

Fixes CVE-2024-21626.

* gnu/packages/virtualization.scm (runc): Update to 1.1.12.

Change-Id: Ie39eef21fd5e9a01f2777dd8ec54421fb05ae0d5
---
 gnu/packages/virtualization.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/virtualization.scm b/gnu/packages/virtualization.scm
index 91f7a151a6..7b42b30f71 100644
--- a/gnu/packages/virtualization.scm
+++ b/gnu/packages/virtualization.scm
@@ -2149,7 +2149,7 @@ (define-public looking-glass-client
 (define-public runc
   (package
     (name "runc")
-    (version "1.1.9")
+    (version "1.1.12")
     (source (origin
               (method url-fetch)
               (uri (string-append
@@ -2158,7 +2158,7 @@ (define-public runc
               (file-name (string-append name "-" version ".tar.xz"))
               (sha256
                (base32
-                "1hhxqwg0mblrgv2aim3scfd9xg13l6i22j124sdma5sf2fzgx5bn"))))
+                "1mx4iik1gx1am3d2s4ljhrirwjzf4ikn8frba5hdhy74012y7na7"))))
     (build-system go-build-system)
     (arguments
      '(#:import-path "github.com/opencontainers/runc"

base-commit: e257de4365b24a84f39813aea2e8b4ab6259f283
-- 
2.41.0

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Christopher Baines <mail <at> cbaines.net>
To: Tomas Volf <~@wolfsden.cz>
Cc: guix-patches <at> gnu.org, 69080-done <at> debbugs.gnu.org
Subject: Re: [bug#69080] [PATCH] gnu: runc: Update to 1.1.12 [security fixes].
Date: Tue, 13 Feb 2024 12:29:17 +0000

[Message part 1 (text/plain, inline)]

Tomas Volf <~@wolfsden.cz> writes:

> Fixes CVE-2024-21626.
>
> * gnu/packages/virtualization.scm (runc): Update to 1.1.12.
>
> Change-Id: Ie39eef21fd5e9a01f2777dd8ec54421fb05ae0d5
> ---
>  gnu/packages/virtualization.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)

Thanks for the patch, I've pushed this to master as
85e67f7feac14a1290022b9500c333c51c7f3ca3.

Chris

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.