Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security] Apply runc version 1.1.2 #429

Merged
merged 2 commits into from
Jun 14, 2022
Merged

[Security] Apply runc version 1.1.2 #429

merged 2 commits into from
Jun 14, 2022

Conversation

Kynea0b
Copy link
Contributor

@Kynea0b Kynea0b commented Jun 7, 2022

Description

This issue was reported by dependabot. For detail, see here. https://nvd.nist.gov/vuln/detail/CVE-2022-29162
This PR addresses this issue.

@Kynea0b Kynea0b requested review from torao and tnasu as code owners June 7, 2022 10:38
@Kynea0b Kynea0b self-assigned this Jun 7, 2022
@Kynea0b Kynea0b added the P: emergency Priority: Emergency issue label Jun 7, 2022
@codecov
Copy link

codecov bot commented Jun 7, 2022

Codecov Report

Merging #429 (aa43d55) into main (f19316f) will increase coverage by 0.09%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #429      +/-   ##
==========================================
+ Coverage   65.28%   65.38%   +0.09%     
==========================================
  Files         277      277              
  Lines       37842    37842              
==========================================
+ Hits        24707    24742      +35     
+ Misses      11321    11289      -32     
+ Partials     1814     1811       -3     
Impacted Files Coverage Δ
privval/socket_listeners.go 79.72% <0.00%> (-4.06%) ⬇️
crypto/bls/bls.go 45.45% <0.00%> (-2.80%) ⬇️
privval/signer_listener_endpoint.go 88.88% <0.00%> (-2.39%) ⬇️
statesync/snapshots.go 93.71% <0.00%> (-1.26%) ⬇️
mempool/reactor.go 78.57% <0.00%> (-1.10%) ⬇️
p2p/switch.go 65.90% <0.00%> (-0.62%) ⬇️
p2p/conn/connection.go 80.00% <0.00%> (-0.39%) ⬇️
consensus/state.go 73.61% <0.00%> (-0.06%) ⬇️
proxy/multi_app_conn.go 47.66% <0.00%> (ø)
p2p/pex/pex_reactor.go 79.67% <0.00%> (+0.61%) ⬆️
... and 5 more

@torao
Copy link
Contributor

torao commented Jun 7, 2022

The URL in the description is a page that cannot be seen by anyone who does not have authorization for this repository. So such people can't know the reason for this PR. Don't use confidential information, but describe the information that is publicly available.

go.mod Show resolved Hide resolved
@Kynea0b Kynea0b added the C: bug Classification: Something isn't working label Jun 8, 2022
@Kynea0b
Copy link
Contributor Author

Kynea0b commented Jun 8, 2022

The URL of the vulnerability has been changed to the public one.

go.mod Show resolved Hide resolved
go.mod Outdated Show resolved Hide resolved
@Kynea0b
Copy link
Contributor Author

Kynea0b commented Jun 13, 2022

I have pasted the private url, so I will rebase it.

@Kynea0b
Copy link
Contributor Author

Kynea0b commented Jun 13, 2022

I modified both the description and comment URL to the public URL.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C: bug Classification: Something isn't working P: emergency Priority: Emergency issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants