From: "Yann E. MORIN" <yann.morin.1998@free.fr>
To: Christian Stewart <christian@aperture.us>
Cc: Stefan Agner <stefan@agner.ch>,
Thomas Petazzoni <thomas.petazzoni@bootlin.com>,
buildroot@buildroot.org
Subject: Re: [Buildroot] [PATCH v1 1/2] package/docker-engine: security bump to version v26.0.0
Date: Mon, 1 Apr 2024 14:21:30 +0200 [thread overview]
Message-ID: <ZgqmyhHKY0_FZYlA@landeda> (raw)
In-Reply-To: <20240331074614.17359-1-christian@aperture.us>
Christian, All,
On 2024-03-31 00:46 -0700, Christian Stewart via buildroot spake thusly:
> Update to the latest major release of docker-engine.
>
> Fixes CVE-2024-29018: potential data exfiltration from 'internal' networks via authoritative DNS servers.
> Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network.
Please wrap your commit logs to the "standard" ~72 chars width.
> https://github.com/moby/moby/releases/tag/v26.0.0
>
> Signed-off-by: Christian Stewart <christian@aperture.us>
Applied to master, thanks.
Regards,
Yann E. MORIN.
> ---
> package/docker-engine/docker-engine.hash | 2 +-
> package/docker-engine/docker-engine.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/docker-engine/docker-engine.hash b/package/docker-engine/docker-engine.hash
> index 931d6529e1..5c76b99af3 100644
> --- a/package/docker-engine/docker-engine.hash
> +++ b/package/docker-engine/docker-engine.hash
> @@ -1,3 +1,3 @@
> # Locally calculated
> -sha256 16a2cb4cf4d314a070085e0df06e3a6bd9ec678d28715b64060af694fc9051d5 docker-engine-24.0.7.tar.gz
> +sha256 fae1aabb63ed5cf6d302a5f4266ed092716b1cea9a974a9d61154ef31b03c302 docker-engine-26.0.0.tar.gz
> sha256 7c87873291f289713ac5df48b1f2010eb6963752bbd6b530416ab99fc37914a8 LICENSE
> diff --git a/package/docker-engine/docker-engine.mk b/package/docker-engine/docker-engine.mk
> index 05bf23ad3d..86106d3ccb 100644
> --- a/package/docker-engine/docker-engine.mk
> +++ b/package/docker-engine/docker-engine.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -DOCKER_ENGINE_VERSION = 24.0.7
> +DOCKER_ENGINE_VERSION = 26.0.0
> DOCKER_ENGINE_SITE = $(call github,moby,moby,v$(DOCKER_ENGINE_VERSION))
>
> DOCKER_ENGINE_LICENSE = Apache-2.0
> --
> 2.43.0
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2024-04-01 12:21 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-03-31 7:46 [Buildroot] [PATCH v1 1/2] package/docker-engine: security bump to version v26.0.0 Christian Stewart via buildroot
2024-03-31 7:46 ` [Buildroot] [PATCH v1 2/2] package/docker-cli: bump version to v26.0.0 Christian Stewart via buildroot
2024-04-01 12:21 ` Yann E. MORIN
2024-04-28 15:08 ` Peter Korsgaard
2024-04-01 12:21 ` Yann E. MORIN [this message]
2024-04-28 15:08 ` [Buildroot] [PATCH v1 1/2] package/docker-engine: security bump to version v26.0.0 Peter Korsgaard
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ZgqmyhHKY0_FZYlA@landeda \
--to=yann.morin.1998@free.fr \
--cc=buildroot@buildroot.org \
--cc=christian@aperture.us \
--cc=stefan@agner.ch \
--cc=thomas.petazzoni@bootlin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.