[ubuntu/kinetic-security] containerd 1.6.12-0ubuntu1~22.10.2 (Accepted)

[David Fernandez Gonzalez]

containerd (1.6.12-0ubuntu1~22.10.2) kinetic-security; urgency=medium

  * SECURITY UPDATE: Denial of service through image processing
    - debian/patches/CVE-2023-25153.patch: limit the amount of
      bytes read to 20Mb in images/archive/importer.go.
    - CVE-2023-25153
  * SECURITY UPDATE: Incorrect supplementary group access control
    - debian/patches/CVE-2023-25173.patch: ensure that primary GID
      is included in the list of additionals GIDs in oci/spec_opts.go.
    - CVE-2023-25173
  * d/p/skip-test-setting-OOM-score-to-negative-number-in-unprivileged-mode.patch:
    fix a FTBFS in Ubuntu builders only.

containerd (1.6.12-0ubuntu1~22.10.1) kinetic; urgency=medium

  * Backport version 1.6.12-0ubuntu1 from Lunar (LP: #1996909).

containerd (1.6.12-0ubuntu1) lunar; urgency=medium

  * New upstream release.
    - Fixes CVE-2022-23471.

containerd (1.6.10-0ubuntu1) lunar; urgency=medium

  * New upstream release (LP: #1993392).

Date: 2023-07-05 07:14:07.768602+00:00
Changed-By: David Fernandez Gonzalez <david.fernandezgonzalez at canonical.com>
https://launchpad.net/ubuntu/+source/containerd/1.6.12-0ubuntu1~22.10.2
-------------- next part --------------
Sorry, changesfile not available.