Skip to contentSkip to conversation

package/containerd: security bump to version 1.5.7

PATCH In review Peter Korsgaard 1 participant 3 messages Nov 7, 2021 – Nov 9, 2021

lore
Share & tools
lore

Peter Korsgaard

author
#0 lore raw

PATCH 1/1 package/containerd: security bump to version 1.5.7

Fixes the following security issues:

- CVE-2021-41103: Insufficiently restricted permissions on plugin directories
https://github.com/advisories/GHSA-c2h3-6mxw-7mvq

Signed-off-by Peter Korsgaard <[email protected]>
---
 package/containerd/containerd.hash | 2 +-
 package/containerd/containerd.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/containerd/containerd.hash +1 -1
index 3840d3ea57..594c56a819 100644
@@ -1,3 +1,3 @@
 # Computed locally
-sha256  3a580cd5f125fd473c10a1ea38178b0f662777144a8cc83d97dba2d2350f2b17  containerd-1.5.5.tar.gz
+sha256  09be0cedea77568029aa0c7be9a323b89fa6886b402b5d223780a05b8c7cd45a  containerd-1.5.7.tar.gz
 sha256  4bbe3b885e8cd1907ab4cf9a41e862e74e24b5422297a4f2fe524e6a30ada2b4  LICENSE
package/containerd/containerd.mk +1 -1
index ea45c61028..fdbd2bf3e6 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CONTAINERD_VERSION = 1.5.5
+CONTAINERD_VERSION = 1.5.7
 CONTAINERD_SITE = $(call github,containerd,containerd,v$(CONTAINERD_VERSION))
 CONTAINERD_LICENSE = Apache-2.0
 CONTAINERD_LICENSE_FILES = LICENSE
Signature · 6 lines
2.20.1

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
author
#1 lore raw
Quoted 8 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Peter" == Peter Korsgaard <[email protected]> writes:

Fixes the following security issues:
- CVE-2021-41103: Insufficiently restricted permissions on plugin directories
https://github.com/advisories/GHSA-c2h3-6mxw-7mvq

Signed-off-by Peter Korsgaard <[email protected]>

Committed, thanks.

Signature · 5 lines
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
author
#2 lore raw
Quoted 7 lines
Quoted 7 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Peter" == Peter Korsgaard <[email protected]> writes:

Fixes the following security issues:
- CVE-2021-41103: Insufficiently restricted permissions on plugin directories
https://github.com/advisories/GHSA-c2h3-6mxw-7mvq

Signed-off-by Peter Korsgaard <[email protected]>

For 2021.02.x / 2021.08.x I have instead bumped to 1.4.11, which contains the same fix.

Signature · 5 lines
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot