Browse Source

package/containerd: security bump to version 1.5.18

Fixes the following security issues:

- CVE-2023-25153: Fix OCI image importer memory exhaustion
  https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2

- CVE-2023-25173: Fix supplementary groups not being set up properly
  https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p

https://github.com/containerd/containerd/releases/tag/v1.5.18

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard 2 năm trước cách đây
mục cha
commit
f002280e73
2 tập tin đã thay đổi với 2 bổ sung2 xóa
  1. 1 1
      package/containerd/containerd.hash
  2. 1 1
      package/containerd/containerd.mk

+ 1 - 1
package/containerd/containerd.hash

@@ -1,3 +1,3 @@
 # Computed locally
-sha256  d14c703ea6d60a45ef2db8f2275ddae6a3538305117c7813fa24dcf12f4b7d85  containerd-1.5.16.tar.gz
+sha256  489ee6b179bf2f0d7f7ac23da4973081cfc95db45231d3fd1e34f7adebe4573b  containerd-1.5.18.tar.gz
 sha256  4bbe3b885e8cd1907ab4cf9a41e862e74e24b5422297a4f2fe524e6a30ada2b4  LICENSE

+ 1 - 1
package/containerd/containerd.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CONTAINERD_VERSION = 1.5.16
+CONTAINERD_VERSION = 1.5.18
 CONTAINERD_SITE = $(call github,containerd,containerd,v$(CONTAINERD_VERSION))
 CONTAINERD_LICENSE = Apache-2.0
 CONTAINERD_LICENSE_FILES = LICENSE