-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-3cccbc4c95 2023-04-21 02:08:33.033772 --------------------------------------------------------------------------------
Name : runc Product : Fedora 38 Version : 1.1.6 Release : 1.fc38 URL : https://github.com/opencontainers/runc Summary : CLI for running Open Containers Description : The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-27561 -------------------------------------------------------------------------------- ChangeLog:
* Wed Apr 12 2023 Lokesh Mandvekar lsm5@fedoraproject.org - 2:1.1.6-1 - Resolves: #2175994, #2182701 * Tue Apr 11 2023 Lokesh Mandvekar lsm5@fedoraproject.org - 2:1.1.5-2 - switch to autospec, remove unnecessary conditionals * Thu Apr 6 2023 Sonia Xu sonix@amazon.com - 2:1.1.5-1 - Update to 1.1.5 * Mon Mar 6 2023 Lokesh Mandvekar lsm5@fedoraproject.org - 2:1.1.4-5 - migrated to SPDX license -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2175721 - CVE-2023-27561 runc: volume mount race condition (regression of CVE-2019-19921) https://bugzilla.redhat.com/show_bug.cgi?id=2175721 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-3cccbc4c95' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org
-
updates＠fedoraproject.org