UbuntuUpdates.org

Package "containerd"

Name: containerd

Description:

daemon to control runC

Latest version: 1.5.5-0ubuntu3~18.04.2
Release: bionic (18.04)
Level: updates
Repository: universe
Homepage: https://containerd.io

Links


Download "containerd"


Other versions of "containerd" in Bionic

Repository Area Version
base universe 0.2.5-0ubuntu2
security universe 1.5.5-0ubuntu3~18.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.5.5-0ubuntu3~18.04.2 2022-03-02 22:07:15 UTC

  containerd (1.5.5-0ubuntu3~18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Insecure handling of image volumes
    - debian/patches/CVE-2022-23648.patch: Use fs.RootPath when mounting
    volumes.
    - CVE-2022-23648

 -- Paulo Flabiano Smorigo <email address hidden> Fri, 25 Feb 2022 20:16:34 +0000

Source diff to previous version

Version: 1.5.5-0ubuntu3~18.04.1 2021-11-04 19:07:25 UTC

  containerd (1.5.5-0ubuntu3~18.04.1) bionic; urgency=medium

  * Backport version 1.5.5-0ubuntu3 from Impish (LP: #1938908).
    - d/control: do not b-d on libbtrfs-dev, it is not available in Bionic.
    - d/control: b-d on golang-1.13-go instead of golang-go.
    - d/rules: set GO111MODULE to off, to avoid Internet connection during the
      build.

Source diff to previous version

Version: 1.5.2-0ubuntu1~18.04.3 2021-10-04 19:06:16 UTC

  containerd (1.5.2-0ubuntu1~18.04.3) bionic-security; urgency=medium

  * SECURITY UPDATE: insufficiently restricted directory permissions
    - debian/patches/1.5-reduce-directory-permissions.patch: reduce
      permissions for bundle dir in runtime/v1/linux/bundle.go,
      runtime/v1/linux/bundle_test.go, runtime/v2/bundle.go,
      runtime/v2/bundle_default.go, runtime/v2/bundle_linux.go,
      runtime/v2/bundle_linux_test.go, runtime/v2/bundle_test.go,
      snapshots/btrfs/btrfs.go.
    - CVE-2021-41103

 -- Marc Deslauriers <email address hidden> Wed, 29 Sep 2021 06:49:25 -0400

Source diff to previous version
CVE-2021-41103 RESERVED

Version: 1.5.2-0ubuntu1~18.04.2 2021-07-20 12:06:21 UTC

  containerd (1.5.2-0ubuntu1~18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: unexpected host file permission changes
    - debian/patches/1.5-Cleanup-lchmod-logic-in-archive.patch: cleanup
      lchmod logic in archive in archive/tar.go, archive/tar_freebsd.go,
      archive/tar_mostunix.go, archive/tar_test.go, archive/tar_unix.go,
      archive/tar_windows.go.
    - No CVE number yet

 -- Marc Deslauriers <email address hidden> Tue, 13 Jul 2021 12:55:59 -0400

Source diff to previous version

Version: 1.5.2-0ubuntu1~18.04.1 2021-07-15 19:06:27 UTC

  containerd (1.5.2-0ubuntu1~18.04.1) bionic; urgency=medium

  * New upstream release, backport from Impish (LP: #1931464).
  * d/p/skip-tests-with-privilege.patch: add a patch to skip tests which
    require a certain level of privilege not achievable in the build
    environment.
  * d/rules: set GO111MODULE variable to off to avoid Internet connection.

 -- Lucas Kanashiro <email address hidden> Fri, 21 May 2021 17:39:43 -0300

1931464 Backport containerd 1.5.2 to all supported releases



About   -   Send Feedback to @ubuntu_updates