15 Commits

Author SHA1 Message Date
zhongjiawei
c2db3a0238 containerd:sync some patches
(cherry picked from commit f5c0eb343e044dcbeda145a0c7bfb604661f724d)
2023-09-19 16:29:38 +08:00
flyflyflypeng
20b8a322fe containerd: remove socket file when get file fd failed
fix #I7VZ9J

Signed-off-by: flyflyflypeng <jiangpengfei9@huawei.com>
(cherry picked from commit f4314719446356d1eea80029a8c1b987805785be)
2023-08-28 15:17:37 +08:00
zhongjiawei
1a012e9ab2 containerd:fix journald stop container shim log stuck bug
(cherry picked from commit 58858265d4a2e36f363e469b5a2f7eaa350cb4c6)
2023-06-16 17:25:41 +08:00
zhongjiawei
22b6fcadc2 containerd:fix CVE-2023-25153 and CVE-2023-25173 2023-02-27 16:50:57 +08:00
zhongjiawei
be24f5d29b containerd:fix k8s build fail without import context
(cherry picked from commit 10b7a7b42500ed03efdebf932980de98f19a9558)
2022-12-15 16:59:48 +08:00
zhongjiawei
649cf3941f containerd:Fix goroutine leak in Exec
(cherry picked from commit 77530a43d1408b65ed868dff7d8062781e892336)
2022-12-13 18:35:59 +08:00
zhongjiawei
2722620407 containerd: fix version number wrong
(cherry picked from commit 34bbfdb93d4fb6f94f70b6abedd832f32d869670)
2022-11-16 15:15:01 +08:00
zhongjiawei
750d0bfb56 containerd: bugfix and add CGO serurity build option
(cherry picked from commit ec5896c6deaa050bfc185cfc9b464f7c8b859fe2)
2022-09-22 17:30:49 +08:00
zhongjiawei
9b138c21c6 containerd: Limit the response size of ExecSync
fix CVE-2022-31030

Signed-off-by: zhongjiawei <zhongjiawei1@huawei.com>
(cherry picked from commit 7487fa60ebe4d7110aa2cfdbcd30ade91760263d)
2022-07-04 16:26:42 +08:00
Vanient
e12947bfb5 containerd:Use fs.RootPath when mounting volumes
fix CVE-2022-23648

Signed-off-by: Vanient <xiadanni1@huawei.com>
(cherry picked from commit 1c20efac8910ccd8180a341eca90db76442b8fef)
2022-04-26 20:49:12 +08:00
xiadanni
c5a97831ab containerd:reduce permissions for bundle dir to fix CVE-2021-41103
upstream:
6886c6a2ec
v1 runtime: reduce permissions for bundle dir

7c621e1fcc
btrfs: reduce permissions on plugin directories

Signed-off-by: xiadanni <xiadanni1@huawei.com>
(cherry picked from commit b4bc26bf252f387c3b26ace2ee20972a67530388)
2021-11-06 17:40:34 +08:00
xiadanni
666217db33 containerd: sync bugfix and bump version
Signed-off-by: xiadanni <xiadanni1@huawei.com>

Conflicts:
	containerd.spec
2021-03-05 11:16:23 +08:00
xiadanni
155deff118 containerd: update patches
0059-containerd-add-GO_GCFLAGS-to-containerd-shim-making.patch
0060-containerd-do-not-disable-cgo-in-containerd-shim-mak.patch
0061-containerd-check-if-bundle-exists-before-create-bund.patch
0062-containerd-use-path-based-socket-for-shims.patch
0063-containerd-kill-init-directly-if-runtime-kill-failed.patch

Signed-off-by: xiadanni <xiadanni1@huawei.com>
2020-11-25 20:05:42 +08:00
Grooooot
3a981f1909 containerd:add patches
Signed-off-by: Grooooot <isula@huawei.com>
2020-03-05 15:54:34 +08:00
Grooooot
7b8aa4184d first commit 2019-12-30 12:24:38 +08:00