From eff29171398e411ab054367f6d9f1892b9d70f67 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Mon, 13 Nov 2023 16:03:29 +0100 Subject: [PATCH] update runc binary to v1.1.10 - full diff: https://github.com/opencontainers/runc/compare/v1.1.9...v1.1.10 - release notes: https://github.com/opencontainers/runc/releases/tag/v1.1.10 This is the tenth (and most likely final) patch release in the 1.1.z release branch of runc. It mainly fixes a few issues in cgroups, and a umask-related issue in tmpcopyup. - Add support for `hugetlb..rsvd` limiting and accounting. Fixes the issue of postgres failing when hugepage limits are set. - Fixed permissions of a newly created directories to not depend on the value of umask in tmpcopyup feature implementation. - libcontainer: cgroup v1 GetStats now ignores missing `kmem.limit_in_bytes` (fixes the compatibility with Linux kernel 6.1+). - Fix a semi-arbitrary cgroup write bug when given a malicious hugetlb configuration. This issue is not a security issue because it requires a malicious config.json, which is outside of our threat model. Signed-off-by: Sebastiaan van Stijn (cherry picked from commit 274a162824369f5349c777c8875dd5d6140d848c) Signed-off-by: Sebastiaan van Stijn --- script/setup/runc-version | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/script/setup/runc-version b/script/setup/runc-version index 1573078f42c5..ac84f8c31982 100644 --- a/script/setup/runc-version +++ b/script/setup/runc-version @@ -1 +1 @@ -v1.1.9 +v1.1.10