packages/runc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
runc/patch
History
Song Zhang 581d133597 runc: fix CVE-2024-45310 
Signed-off-by: Song Zhang <zhangsong34@huawei.com>
2024-09-10 21:28:03 +08:00
..
0001-.travis.yml-Don-t-require-FETCH_HEAD.patch
runc: package init
2019-12-29 15:34:20 +08:00
0002-Don-t-try-to-read-freezer.state-from-the-cu.patch
runc: package init
2019-12-29 15:34:20 +08:00
0003-Use-opencontainers-selinux-package.patch
runc: package init
2019-12-29 15:34:20 +08:00
0004-handle-unprivileged-operations-and-dumpable.patch
runc: package init
2019-12-29 15:34:20 +08:00
0005-runc-add-support-for-rootless-containers.patch
runc: package init
2019-12-29 15:34:20 +08:00
0006-rootless-add-rootless-cgroup-manager.patch
runc: package init
2019-12-29 15:34:20 +08:00
0007-libcontainer-configs-add-proper-HostUID-and.patch
runc: package init
2019-12-29 15:34:20 +08:00
0008-libcontainer-init-fix-unmapped-console-fcho.patch
runc: package init
2019-12-29 15:34:20 +08:00
0009-rootless-add-autogenerated-rootless-config-.patch
runc: package init
2019-12-29 15:34:20 +08:00
0010-integration-added-root-requires.patch
runc: package init
2019-12-29 15:34:20 +08:00
0011-tests-add-rootless-integration-tests.patch
runc: package init
2019-12-29 15:34:20 +08:00
0012-vendor-add-golang.org-x-sys-unix-9a7256cb28.patch
runc: package init
2019-12-29 15:34:20 +08:00
0013-libcontainer-rewrite-cmsg-to-use-sys-unix.patch
runc: package init
2019-12-29 15:34:20 +08:00
0014-Set-container-state-only-once-during-start.patch
runc: package init
2019-12-29 15:34:20 +08:00
0015-checkpoint-check-if-system-supports-pre-dum.patch
runc: package init
2019-12-29 15:34:20 +08:00
0016-Fix-console-syscalls.patch
runc: package init
2019-12-29 15:34:20 +08:00
0017-restore-apply-resource-limits.patch
runc: package init
2019-12-29 15:34:20 +08:00
0018-could-load-a-stopped-container.patch
runc: package init
2019-12-29 15:34:20 +08:00
0019-Revert-back-to-using-sbin.patch
runc: package init
2019-12-29 15:34:20 +08:00
0020-add-testcase-in-generic_error_test.go.patch
runc: package init
2019-12-29 15:34:20 +08:00
0021-Fix-misspelling-of-properties-in-various-pl.patch
runc: package init
2019-12-29 15:34:20 +08:00
0022-Add-a-rootless-containers-section-on-README.patch
runc: package init
2019-12-29 15:34:20 +08:00
0023-vendor-clean-up-to-be-better-written.patch
runc: package init
2019-12-29 15:34:20 +08:00
0024-Optimizing-looping-over-namespaces.patch
runc: package init
2019-12-29 15:34:20 +08:00
0025-Add-a-rootless-section-to-spec-man-page-and.patch
runc: package init
2019-12-29 15:34:20 +08:00
0026-Allow-updating-container-pids-limit.patch
runc: package init
2019-12-29 15:34:20 +08:00
0027-Remove-redundant-declaraion-of-namespace-sl.patch
runc: package init
2019-12-29 15:34:20 +08:00
0028-Revert-saneTerminal.patch
runc: package init
2019-12-29 15:34:20 +08:00
0029-vendor-runtime-spec-fork-docker-runtime-spe.patch
runc: package init
2019-12-29 15:34:20 +08:00
0030-Update-memory-specs-to-use-int64-not-uint64.patch
runc: package init
2019-12-29 15:34:20 +08:00
0031-Add-spec-for-euleros.patch
runc: package init
2019-12-29 15:34:20 +08:00
0032-runc-17-Always-save-own-namespace-paths.patch
runc: package init
2019-12-29 15:34:20 +08:00
0034-runc-17-Add-some-compatibility-code-to-surpor.patch
runc: package init
2019-12-29 15:34:20 +08:00
0035-runc-17-Add-root-to-HookState-for-compatibili.patch
runc: package init
2019-12-29 15:34:20 +08:00
0036-runc-17-add-compatibility-for-docker-1.11.2.patch
runc: package init
2019-12-29 15:34:20 +08:00
0037-docker-Don-t-enalbe-kmem-accounting-by-defa.patch
runc: package init
2019-12-29 15:34:20 +08:00
0039-Fix-unittest-and-integration-test-error-cause.patch
runc: package init
2019-12-29 15:34:20 +08:00
0041-Add-timeout-for-syscall.Openat.patch
runc: package init
2019-12-29 15:34:20 +08:00
0042-update-state-earlier-to-avoid-cgroup-leak-whe.patch
runc: package init
2019-12-29 15:34:20 +08:00
0043-runc-Use-rslave-instead-of-rprivate-in-chro.patch
runc: package init
2019-12-29 15:34:20 +08:00
0044-runc-default-mount-propagation-correctly.patch
runc: package init
2019-12-29 15:34:20 +08:00
0045-runc-add-hook-specific-info-when-error-occurr.patch
runc: package init
2019-12-29 15:34:20 +08:00
0046-runc-print-cgroup-info-if-cpuset-missing-occu.patch
runc: package init
2019-12-29 15:34:20 +08:00
0047-runc-add-more-specific-log-for-hooks.patch
runc: package init
2019-12-29 15:34:20 +08:00
0048-runc-Only-configure-networking.patch
runc: package init
2019-12-29 15:34:20 +08:00
0049-cgroups-fs-fix-NPE-on-Destroy-than-no-cgrou.patch
runc: package init
2019-12-29 15:34:20 +08:00
0050-runc-Avoid-race-when-opening-exec-fifo.patch
runc: package init
2019-12-29 15:34:20 +08:00
0051-runc-Return-from-goroutine-when-it-should-t.patch
runc: package init
2019-12-29 15:34:20 +08:00
0052-runc-reduce-max-number-of-retries-to-10.patch
runc: package init
2019-12-29 15:34:20 +08:00
0053-runc-print-error-message-during-start-into-co.patch
runc: package init
2019-12-29 15:34:20 +08:00
0054-runc-ignore-exec.fifo-removing-not-exist-erro.patch
runc: package init
2019-12-29 15:34:20 +08:00
0055-Add-file-fds-limit.patch
runc: package init
2019-12-29 15:34:20 +08:00
0056-runc-Modify-max-files.limit-to-max-because-of.patch
runc: package init
2019-12-29 15:34:20 +08:00
0057-runc-change-read-value-of-cgroup-files.limit-.patch
runc: package init
2019-12-29 15:34:20 +08:00
0058-runc-fix-panic-when-Linux-is-nil.patch
runc: package init
2019-12-29 15:34:20 +08:00
0059-Fix-setup-cgroup-before-prestart-hook.patch
runc: package init
2019-12-29 15:34:20 +08:00
0060-runc-runc-logs-forwarding-to-syslog.patch
runc: package init
2019-12-29 15:34:20 +08:00
0061-runc-17-change-golang-build-version-to-make-o.patch
runc: package init
2019-12-29 15:34:20 +08:00
0062-runc-Check-the-hook-timeout-in-case-overflow.patch
runc: package init
2019-12-29 15:34:20 +08:00
0063-docker-close-openchan-immediately-to-avoid-er.patch
runc: package init
2019-12-29 15:34:20 +08:00
0064-runc-bump-to-v1.0.0.rc3.4-after-normalization.patch
runc: package init
2019-12-29 15:34:20 +08:00
0065-runc-support-namespaced-kernel-params-can-be-.patch
runc: package init
2019-12-29 15:34:20 +08:00
0066-runc-bump-to-v1.0.0.rc3.6.patch
runc: package init
2019-12-29 15:34:20 +08:00
0067-runc-make-the-runc-log-more-useful.patch
runc: package init
2019-12-29 15:34:20 +08:00
0068-runc-reduced-the-same-log-when-the-hook-exect.patch
runc: package init
2019-12-29 15:34:20 +08:00
0069-runc-Change-Files-to-LinuxFiles-for-file-limi.patch
runc: package init
2019-12-29 15:34:20 +08:00
0070-runc-not-print-no-such-file-when-cli-err.patch
runc: package init
2019-12-29 15:34:20 +08:00
0071-runc-revert-Change-Files-to-LinuxFiles-for-fi.patch
runc: package init
2019-12-29 15:34:20 +08:00
0072-Revert-runc-not-print-no-such-file-when-cli-e.patch
runc: package init
2019-12-29 15:34:20 +08:00
0073-runc-fix-state.json-no-such-file-or-directory.patch
runc: package init
2019-12-29 15:34:20 +08:00
0074-runc-fix-check-sysctl-in-host-network-mode.patch
runc: package init
2019-12-29 15:34:20 +08:00
0075-runc-Fix-systemd-journald-service-dependency.patch
runc: package init
2019-12-29 15:34:20 +08:00
0076-runc-Fix-syslog-hook-bug.patch
runc: package init
2019-12-29 15:34:20 +08:00
0077-runc-Require-libseccomp-static-lib-for-upgrade-f.patch
runc: package init
2019-12-29 15:34:20 +08:00
0078-runc-Fix-race-in-runc-exec.patch
runc: package init
2019-12-29 15:34:20 +08:00
0079-runc-modify-spec-file-for-upgrade.patch
runc: package init
2019-12-29 15:34:20 +08:00
0081-runc-fix-oom-killer-disable-unhandled-due-t.patch
runc: package init
2019-12-29 15:34:20 +08:00
0082-runc-make-runc-spec-and-docker-18.9-compati.patch
runc: package init
2019-12-29 15:34:20 +08:00
0083-log-fix-runc-log-decode-failed.patch
runc: package init
2019-12-29 15:34:20 +08:00
0084-oci-fix-runc-panic-and-support-oom-score.patch
runc: package init
2019-12-29 15:34:20 +08:00
0085-runc-do-not-setup-sysctl-in-runc-when-userns-.patch
runc: package init
2019-12-29 15:34:20 +08:00
0086-runc-support-set-seccomp-priority.patch
runc: package init
2019-12-29 15:34:20 +08:00
0087-runc-fix-spec-LinuxSyscall-struct.patch
runc: package init
2019-12-29 15:34:20 +08:00
0088-nsenter-clone-proc-self-exe-to-avoid-exposi.patch
runc: package init
2019-12-29 15:34:20 +08:00
0089-Revert-nsenter-clone-proc-self-exe-to-avoid.patch
runc: package init
2019-12-29 15:34:20 +08:00
0090-nsenter-clone-proc-self-exe-to-avoid-exposi.patch
runc: package init
2019-12-29 15:34:20 +08:00
0091-runc-cve-2019-5736-workaround-if-memfd_create.patch
runc: package init
2019-12-29 15:34:20 +08:00
0092-runc-cve-2019-5736-fix-build-failure.patch
runc: package init
2019-12-29 15:34:20 +08:00
0093-runc-fix-error-when-check-the-init-process.patch
runc: package init
2019-12-29 15:34:20 +08:00
0094-runc-If-tmp-is-mounted-by-option-noexec-docke.patch
runc: package init
2019-12-29 15:34:20 +08:00
0095-runc-just-warning-when-poststart-and-poststop.patch
runc: package init
2019-12-29 15:34:20 +08:00
0096-runc-do-not-kill-container-if-poststart-hooks.patch
runc: package init
2019-12-29 15:34:20 +08:00
0097-runc-Fix-mountpoint-leak-and-pivot_root-error.patch
runc: package init
2019-12-29 15:34:20 +08:00
0098-runc-fix-read-only-containers-under-userns-.patch
runc: package init
2019-12-29 15:34:20 +08:00
0099-runc-enable-bep-ldflags.patch
runc: package init
2019-12-29 15:34:20 +08:00
0100-runc-set-makefile-buildid.patch
runc: package init
2019-12-29 15:34:20 +08:00
0101-runc-print-memory-info-when-syscall.Exec-fail.patch
runc: package init
2019-12-29 15:34:20 +08:00
0102-runc-add-sysctl-kernel.pid_max-to-whitelist.patch
runc: package init
2019-12-29 15:34:20 +08:00
0104-runc-Retry-adding-pids-to-cgroups-when-EINV.patch
runc: package init
2019-12-29 15:34:20 +08:00
0105-runc-disable-core-dump-during-pipe-io.patch
runc: package init
2019-12-29 15:34:20 +08:00
0106-runc-do-not-override-devices.allow-file-when-.patch
runc: package init
2019-12-29 15:34:20 +08:00
0107-runc-fix-exec-problem-caused-by-libseccomp-up.patch
runc: package init
2019-12-29 15:34:20 +08:00
0108-runc-print-files-limit-and-usage-when-exec-fa.patch
runc: package init
2019-12-29 15:34:20 +08:00
0109-runc-add-copyright.patch
runc: package init
2019-12-29 15:34:20 +08:00
0110-runc-add-lisence.patch
runc: package init
2019-12-29 15:34:20 +08:00
0111-runc-add-log-message-for-cgroup-file-check.patch
runc: package init
2019-12-29 15:34:20 +08:00
0112-runc-add-log-message-for-cgroup-file-check.patch
runc: package init
2019-12-29 15:34:20 +08:00
0112-runc-Fixes-1585-config.Namespaces-is-empty-.patch
runc: sync patches
2020-03-05 19:34:03 +08:00
0113-runc-modify-files-cgroup-info-reading-path.patch
runc: package init
2019-12-29 15:34:20 +08:00
0113-runc-Write-freezer-state-after-every-state-.patch
runc: sync patches
2020-03-05 19:34:03 +08:00
0114-runc-may-kill-other-process-when-container-.patch
runc: sync patches
2020-03-05 19:34:03 +08:00
0115-runc-Fix-cgroup-hugetlb-size-prefix-for-kB.patch
runc: sync patches
2020-03-05 19:34:03 +08:00
0116-runc-check-nil-pointers-in-cgroup-manager.patch
runc: sync patches
2020-03-05 19:34:03 +08:00
0117-runc-Pass-back-the-pid-of-runc-1-CHILD-so-w.patch
runc:Pass back the pid of runc:[1:CHILD] so we can wait on it
2020-03-20 21:31:32 +08:00
0118-runc-don-t-deny-all-devices-when-update-cgroup-resou.patch
runc: update patches
2020-11-25 19:49:16 +08:00
0119-runc-rootfs-do-not-permit-proc-mounts-to-no.patch
runc: update patches
2020-11-25 19:49:16 +08:00
0120-runc-fix-permission-denied.patch
runc: update patches
2020-11-25 19:49:16 +08:00
0121-runc-add-cpu-and-memory-info-when-print-cgroup-info.patch
runc:sync bugfix and bump version
2021-03-05 11:36:07 +08:00
0124-runc-fix-freezing-race.patch
runc:sync bugfix and bump version
2021-03-05 11:36:07 +08:00
0126-runc-add-mount-destination-validation-fix-CVE-2021.patch
runc:add mount destination validation(fix CVE-2021-30465)
2021-06-04 12:46:21 +08:00
0127-runc-fix-systemd-cgroup-after-memory-type-changed.patch
runc:fix systemd cgroup after memory type changed
2021-08-09 11:44:43 +08:00
0128-runc-fix-CVE-2022-29162.patch
runc:do not set inheritable capabilities(fix CVE-2022-29162)
2022-06-06 20:46:23 +08:00
0129-runc-Makefile-modify.patch
runc: add build security option and improve log for debugging
2022-09-22 09:11:04 +08:00
0130-runc-add-logs.patch
runc: add build security option and improve log for debugging
2022-09-22 09:11:04 +08:00
0131-runc-support-specify-umask.patch
runc:support specify umask
2022-12-17 15:14:21 +08:00
0132-Make-sure-signalAllProcesses-is-invoked-in-the-funct.patch
runc:Make sure signalAllProcesses is invoked in the function of destroy when container shares pid namespace
2023-02-13 15:46:34 +08:00
0133-runc-seccomp-prepend-ENOSYS-stub-to-all-filters.patch
runc:seccomp prepend ENOSYS stub to all filters
2023-02-13 16:07:52 +08:00
0134-runc-fix-seccomp-add-rule-failed.patch
runc:seccomp prepend ENOSYS stub to all filters
2023-02-13 16:07:52 +08:00
0135-runc-libct-cg-fs-blkio-do-not-set-weight-0.patch
runc:fix tmpfs mount bug and blkio do not set bug
2023-03-30 10:02:50 +08:00
0136-runc-run-resolve-tmpfs-mount-dest-in-container-scope.patch
runc:fix tmpfs mount bug and blkio do not set bug
2023-03-30 10:02:50 +08:00
0137-runc-Prohibit-proc-and-sys-to-be-symlinks.patch
runc:Prohibit /proc and /sys to be symlinks
2023-04-04 16:35:00 +08:00
0138-runc-libct-fix-shared-pidns-detection.patch
runc:fix shared pidns detection
2023-06-25 14:47:38 +08:00
0139-runc-ingore-error-when-force-deleting-a-non-exist-cont.patch
runc:sync some patches
2023-10-24 17:28:50 +08:00
0140-runc-delete-invalid-cgroupinfo-logs.patch
runc:sync some patches
2023-10-24 17:28:50 +08:00
0141-runc-libct-init-unify-init-fix-its-error-logic.patch
runc:fix the bug when runc syscall.Exec cmd not exist cause panic
2023-10-26 18:58:43 +08:00
0142-runc-freezer-add-delay-after-freeze.patch
runc:sync some patches
2023-10-24 17:28:50 +08:00
0143-runc-fix-update-rt-runtime-us-and-rt-period-us-.patch
runc:sync some patches
2023-10-24 17:28:50 +08:00
0144-runc-update-skip-devices.patch
runc: fix the bug when runc failed to update fat container memory value
2023-11-24 10:46:57 +08:00
0145-runc-libcontainer-create-Cwd-when-it-does-not-exist.patch
runc: create cwd when it does not exist
2023-11-27 19:21:29 +08:00
0146-runc-delete-do-not-ignore-error-from-destroy.patch
runc: delete do not ignore error from destroy
2023-12-04 16:37:54 +08:00
0147-runc-libct-Destroy-don-t-proceed-in-case-of-errors.patch
runc:delete don't proceed in case of errors
2023-12-08 17:05:11 +08:00
0148-runc-fix-CVE-2024-21626.patch
runc:fix CVE-2024-21626
2024-02-01 19:02:05 +08:00
0149-runc-check-cmd-exist.patch
runc:check cmd exist
2024-02-06 15:11:08 +08:00
0150-runc-Fix-File-to-Close.patch
runc:backport some patches
2024-03-04 19:37:01 +08:00
0151-runc-Fix-tmpfs-mode-opts-when-dir-already-exis.patch
runc:backport some patches
2024-03-04 19:37:01 +08:00
0152-runc-do-not-support-set-umask-through-native.umask.patch
runc:do not support set umask through native.umask
2024-07-11 19:42:30 +08:00
0153-runc-format-log-instead-panic-when-procError-missing.patch
runc:format log instead panic when procError missing payload
2024-08-30 16:12:33 +08:00
0154-rootfs-try-to-scope-MkdirAll-to-stay-inside-the-root.patch
runc: fix CVE-2024-45310
2024-09-10 21:28:03 +08:00