feat: update runc to 1.0.0-rc95

See https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This addresses [CVE-2021-30465](GHSA-c3xm-pvg7-gh7r). Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
siderolabs · May 19, 2021 · c70ea44 · c70ea44
1 parent db60235
commit c70ea44
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 9 deletions.
diff --git a/containerd/pkg.yaml b/containerd/pkg.yaml
@@ -8,8 +8,8 @@ steps:
   - sources:
       - url: https://github.com/containerd/containerd/archive/v1.5.1.tar.gz
         destination: containerd.tar.gz
-        sha256: 61272db3070d80cfc8ad6f3e6aadb9c2c9a7f64940b4a9097f79d35e213cd376
-        sha512: 8ba67a0e00eb6d63f1ecc8cf9d20f0beae86a816a837c99f24cafbb8ebabe32ce91c8d96c4240da34edbade7cd2020327a1d33a1d8e57fb216f764d44910b999
+        sha256: e381c5133feacf7a9d6991c3535103f3c1f7a86b5b8ce2df226c5abde77fb5d8
+        sha512: 457e3059638af7479aebc88bb8aea148d93b0a42de3b3ea78b7ee81e9af8132bedaeb53a1cc06763a13158d0cacf2a1f788820b49d899d5f0eed7ed3a65dc271
     prepare:
       - |
         tar -xzf containerd.tar.gz --strip-components=1

diff --git a/libseccomp/pkg.yaml b/libseccomp/pkg.yaml
@@ -5,10 +5,10 @@ dependencies:
   - stage: base
 steps:
   - sources:
-      - url: https://github.com/seccomp/libseccomp/releases/download/v2.4.4/libseccomp-2.4.4.tar.gz
+      - url: https://github.com/seccomp/libseccomp/releases/download/v2.5.1/libseccomp-2.5.1.tar.gz
         destination: libseccomp.tar.gz
-        sha256: 4e79738d1ef3c9b7ca9769f1f8b8d84fc17143c2c1c432e53b9c64787e0ff3eb
-        sha512: 53e5aa338a1c30ce826551e33be6ef877af43b1d8cfd2e1b6ffb70789eb2070d2610fb7cb5cec4a3a4c4a1221767f867f3d2bc07b6b1d9742719b1e053630b24
+        sha256: ee307e383c77aa7995abc5ada544d51c9723ae399768a97667d4cdb3c3a30d55
+        sha512: 2be80a6323f9282dbeae8791724e5778b32e2382b2a3d1b0f77366371ec4072ea28128204f675cce101c091c0420d12c497e1a9ccbb7dc5bcbf61bfd777160af
     prepare:
       - |
         tar -xzf libseccomp.tar.gz --strip-components=1

diff --git a/runc/pkg.yaml b/runc/pkg.yaml
@@ -6,10 +6,10 @@ dependencies:
   - stage: libseccomp
 steps:
   - sources:
-      - url: https://github.com/opencontainers/runc/releases/download/v1.0.0-rc94/runc.tar.xz
+      - url: https://github.com/opencontainers/runc/releases/download/v1.0.0-rc95/runc.tar.xz
         destination: runc.tar.xz
-        sha256: 87daf369dcac7f1895e72bc0ee22ba9e29d4678d6d0dd795f336e35c222a801a
-        sha512: a1ce2a5ae21f0d4ac1b2d26cbf0ef60e119dfffb984c5fdec1e46f55a2bdcf64ed743b52837ed105932b935a60739e62d9b1af2ddd9e4f16ee5c1b81e4f7e360
+        sha256: 8304b161e1c0ec2cee969b25671a147cd56cb99e6aa534371b2cfb3ec13db2c4
+        sha512: e2f30a4da4a56b1e017a2c3d0dc2df4b719e118f91ba051b29bca5e5cd9c99a07aa0da35c86a1f5748ea1392c951e33bfb4c55d2aef46264dfabf134d7f27e12
     prepare:
       - |
         export GOPATH=/go
@@ -26,7 +26,7 @@ steps:
         export CC=/toolchain/bin/cc
         # This is required due to "loadinternal: cannot find runtime/cgo".
         export CGO_ENABLED=1
-        make EXTRA_LDFLAGS="-w -s" BUILDTAGS="seccomp" COMMIT=2c7861bc5e1b3e756392236553ec14a78a09f8bf runc
+        make EXTRA_LDFLAGS="-w -s" BUILDTAGS="seccomp" COMMIT=b9ee9c6314599f1b4a7f497e1f1f856fe433d3b7 runc
     install:
       - |
         export GOPATH=/go