openRuyi-tutorials/buildroot
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
81,471 Commits 2 Branches 459 Tags
master
Commit Graph
27 Commits
Author SHA1 Message Date
Thomas Perale 49e180d3d5 package/containerd: security bump to v2.0.7 
For more information on the version bump, see:
  - https://github.com/containerd/containerd/releases/tag/v2.0.7
  - https://github.com/containerd/containerd/releases/tag/v2.0.6
  - https://github.com/containerd/containerd/releases/tag/v2.0.5
  - https://github.com/containerd/containerd/releases/tag/v2.0.4
  - https://github.com/containerd/containerd/releases/tag/v2.0.3

Fixes the following vulnerabilities:

- CVE-2024-25621:
    Versions 2.0.0-beta.0 through 2.0.6 have an overly broad default
    permission vulnerability. Directory paths `/var/lib/containerd`,
    `/run/containerd/io.containerd.grpc.v1.cri` and
    `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all
    created with incorrect permissions.

    https://www.cve.org/CVERecord?id=CVE-2024-25621

- CVE-2024-40635:
    A bug was found in containerd prior to versions 2.0.4 where
    containers launched with a User set as a `UID:GID` larger than the
    maximum 32-bit signed integer can cause an overflow condition where
    the container ultimately runs as root (UID 0). This could cause
    unexpected behavior for environments that require containers to run
    as a non-root user.

    https://www.cve.org/CVERecord?id=CVE-2024-40635

- CVE-2025-47291:
    A bug was found in the containerd's CRI implementation where
    containerd, starting in version 2.0.1 and prior to version 2.0.5,
    doesn't put usernamespaced containers under the Kubernetes' cgroup
    hierarchy, therefore some Kubernetes limits are not honored. This
    may cause a denial of service of the Kubernetes node.

    https://www.cve.org/CVERecord?id=CVE-2025-47291

- CVE-2025-64329:
    Versions 2.0.0-beta.0 through 2.0.6 contain a bug in the CRI Attach
    implementation where a user can exhaust memory on the host due to
    goroutine leaks.

    https://www.cve.org/CVERecord?id=CVE-2025-64329

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
 2026-02-25 21:56:21 +01:00
Christian Stewart 9c2e146ca9 package/containerd: bump to version v2.0.2 
Major release v1 -> v2.

Dropped patch as it is no longer necessary:
https://github.com/containerd/containerd/pull/8924

containerd-shim and containerd-shim-runc-v1 were removed.

https://github.com/containerd/containerd/releases/tag/v2.0.2

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2025-01-31 22:19:33 +01:00
Christian Stewart 5c9e9164c5 package/containerd: bump version to v1.7.23 
Latest minor release.

https://github.com/containerd/containerd/releases/tag/v1.7.23

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-10-26 15:33:39 +02:00
Christian Stewart c7ad03ca18 package/containerd: bump version to v1.7.20 
https://github.com/containerd/containerd/releases/tag/v1.7.20

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2024-07-22 18:01:33 +02:00
Christian Stewart 4e01942d83 package/containerd: bump version to v1.7.18 
https://github.com/containerd/containerd/releases/tag/v1.7.18

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
 2024-06-30 16:38:46 +02:00
Yann E. MORIN de5ed80212 {boot, package}: update hashes for generated archives 
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
 2024-05-09 22:45:11 +02:00
Yann E. MORIN d8000791e3 {boot, package}: update hashes of git, svn, go, and cargo archives 
Replace all git and svn packages archive names in hash files:

    $ sed -r -i -e 's/-br2/-git3/; s/-br3/-svn4/' $(
        git grep -l -E -- '-br2|-br3' '*.hash'
    )

    $ sed -r -i -e 's/(\.tar\.gz)$/-go1\1/' $(
        git grep -l -E '\$\(eval \$\((host-)?golang-package\)\)' '*.mk' \
        |sed -r -e 's/\.mk$/.hash/' \
        |sort -u
    )

    $ sed -r -i -e 's/(\.tar\.gz)$/-cargo1\1/' $(
        git grep -l -E '\$\(eval \$\((host-)?cargo-package\)\)' '*.mk' \
        |sed -r -e 's/\.mk$/.hash/' \
        |sort -u
    )

Then a bit of make source (based on: git diff --name-only), a lot of
sweat, and carefully checking the new archives to verify that only
modes have changed...

Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
 2024-05-09 22:45:02 +02:00
Christian Stewart 2fa0f383b6 package/containerd: bump version to v1.7.14 
Updates containerd to v1.7.14.

Highlights

    Fix various timing issues with docker pusher
    Register imagePullThroughput and count with MiB
    Move high volume event logs to Trace level

Container Runtime Interface (CRI)

    Handle pod transition states gracefully while listing pod stats

Runtime

    Update runc-shim to process exec exits before init

https://github.com/containerd/containerd/releases/tag/1.7.14

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2024-04-01 15:10:06 +02:00
Christian Stewart 54e95ba171 package/containerd: bump version to v1.7.13 
https://github.com/containerd/containerd/releases/tag/v1.7.13

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2024-02-07 09:35:01 +01:00
Christian Stewart fd41e442f0 package/containerd: bump version to v1.7.8 
The eighth patch release for containerd 1.7 contains various fixes and updates.

https://github.com/containerd/containerd/releases/tag/v1.7.8

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-11-08 08:08:54 +01:00
Christian Stewart 79e01ef950 package/containerd: bump to version 1.7.7 
Contains various fixes and updates.

https://github.com/containerd/containerd/releases/tag/v1.7.7

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-10-12 16:40:07 +02:00
Christian Stewart 47cbcb70d0 package/containerd: bump to version 1.7.6 
Bugfixes and updates.

Containerd v1.7.x comes with new features including container sandboxing.

https://github.com/containerd/containerd/releases/tag/v1.7.6

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
 2023-09-17 21:34:09 +02:00
Christian Stewart 718c4972c6 package/containerd: bump version to v1.6.22 
Bugfixes and updates.

https://github.com/containerd/containerd/releases/tag/v1.6.22

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2023-07-28 21:16:57 +02:00
Christian Stewart bab89b35f0 package/containerd: bump version to v1.6.21 
https://github.com/containerd/containerd/releases/tag/v1.6.21

Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-06-02 22:26:09 +02:00
Stefan Agner 8bf66c5640 package/containerd: security bump to version 1.6.20 
Various bugfixes and improvements. Noteable security fixes:

- CVE-2023-25153: Fix OCI image importer memory exhaustion
  https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2

- CVE-2023-25173: Fix supplementary groups not being set up properly
  https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p

https://github.com/containerd/containerd/releases/tag/v1.6.20

Signed-off-by: Stefan Agner <stefan@agner.ch>
[Peter: add CVE references]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-04-05 21:58:18 +02:00
Christian Stewart c7ea83dd2d package/containerd: bump to version 1.6.16 
Bugfixes and improvements.

We now install the containerd.service systemd unit.

https://github.com/containerd/containerd/releases/tag/v1.6.16

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2023-02-03 08:32:09 +01:00
Christian Stewart 4634a22cf7 package/containerd: security bump to version 1.6.12 
CVE-2022-23471: https://github.com/advisories/GHSA-2qjp-425j-52j9

and other bugfixes, see:

https://github.com/containerd/containerd/releases/tag/v1.6.12

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-12-11 14:33:05 +01:00
Christian Stewart dc8aafa98b package/containerd: bump to version 1.6.8 
https://github.com/containerd/containerd/releases/tag/v1.6.8

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-09-17 12:26:15 +02:00
Christian Stewart 7e7ae463d1 package/containerd: security bump to 1.6.6 
v1.6.2 -> v1.6.6:

The third patch release for containerd 1.6 includes various fixes and updates.

https://github.com/containerd/containerd/releases/tag/v1.6.3

The fourth patch release for containerd 1.6 includes two fixes for CNI and SELinux.

https://github.com/containerd/containerd/releases/tag/v1.6.4

The fifth patch release for containerd 1.6 includes a few fixes.

https://github.com/containerd/containerd/releases/tag/v1.6.5

The sixth patch release for containerd 1.6 includes a fix for
CVE-2022-31030.

https://github.com/containerd/containerd/releases/tag/v1.6.6

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-08-06 23:25:10 +02:00
Christian Stewart 2b1c7ebc9b package/containerd: bump to version v1.6.2 
Note: this version adds compatibility for Go 1.18.

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
 2022-04-10 16:47:48 +02:00
Peter Korsgaard 2642edb0af package/containerd: security bump to version 1.5.11 
Fixes the following security issues:

- CVE-2022-23648: containerd CRI plugin: Insecure handling of image volumes
  https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7

- CVE-2022-24769: Default inheritable capabilities for linux container
  should be empty
  https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2022-04-05 19:28:14 +02:00
Christian Stewart 935bd589a3 package/containerd: security bump to version 1.5.9 
CVE-2021-43816: "Unprivileged pod using `hostPath` can side-step active LSM when
it is SELinux"

Containers launched through containerd’s CRI implementation on Linux systems
which use the SELinux security module and containerd versions since v1.5.0 can
cause arbitrary files and directories on the host to be relabeled to match the
container process label through the use of specially-configured bind mounts in a
hostPath volume. This relabeling elevates permissions for the container,
granting full read/write access over the affected files and directories.
Kubernetes and crictl can both be configured to use containerd’s CRI
implementation.

https://github.com/advisories/GHSA-mvff-h3cj-wj9c
https://github.com/containerd/containerd/releases/tag/v1.5.9

Signed-off-by: Christian Stewart <christian@paral.in>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 2022-01-26 22:22:55 +01:00
Fabrice Fontaine fc24c5c30a package/containerd: security bump to version 1.5.8 
The eighth patch release for containerd 1.5 contains a mitigation for
CVE-2021-41190 as well as several fixes and updates.

https://github.com/containerd/containerd/releases/tag/v1.5.8

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Christian Stewart <christian@paral.in>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
 2021-12-12 15:48:32 +01:00
Peter Korsgaard 4b5b9f75e9 package/containerd: security bump to version 1.5.7 
Fixes the following security issues:

- CVE-2021-41103: Insufficiently restricted permissions on plugin
  directories
  https://github.com/advisories/GHSA-c2h3-6mxw-7mvq

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
 2021-11-08 08:04:00 +01:00
Christian Stewart via buildroot 9eafd6f5d0 package/containerd: bump version to 1.5.5 
Signed-off-by: Christian Stewart <christian@paral.in>
 2021-09-27 16:20:40 +02:00
Fabrice Fontaine 90f175045a package/containerd: security bump to version 1.4.9 
- Fix CVE-2021-32760:
  https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
- Update indentation in hash file (two spaces)

https://github.com/containerd/containerd/releases/tag/v1.4.9
https://github.com/containerd/containerd/releases/tag/v1.4.8
https://github.com/containerd/containerd/releases/tag/v1.4.7
https://github.com/containerd/containerd/releases/tag/v1.4.6
https://github.com/containerd/containerd/releases/tag/v1.4.5

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Reviewed-by: Christian Stewart <christian@paral.in>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
 2021-09-18 14:24:09 +02:00
Christian Stewart 35af2bb801 package/docker-containerd: rename package to containerd 
containerd is now an independent project from Docker.

This commit renames the Buildroot package from docker-containerd to containerd,
adding a entry in Config.in.legacy accordingly.

containerd is an industry-standard container runtime with an emphasis on
simplicity, robustness and portability. It is available as a daemon for Linux
and Windows, which can manage the complete container lifecycle of its host
system: image transfer and storage, container execution and supervision,
low-level storage and network attachments, etc.

https://containerd.io

Signed-off-by: Christian Stewart <christian@paral.in>
Reviewed-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
[Arnout:
 - fix alphabetical ordering in package/Config.in
 - also do rename in DEVELOPERS
 - squash in second patch
]
 2021-05-05 21:33:58 +02:00