* [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11
@ 2026-08-16 20:32 Bernd Kuhls
2026-08-16 20:32 ` [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2 Bernd Kuhls
` (4 more replies)
0 siblings, 5 replies; 10+ messages in thread
From: Bernd Kuhls @ 2026-08-16 20:32 UTC (permalink / raw)
To: buildroot; +Cc: Christian Stewart
https://github.com/containerd/containerd/releases/tag/v2.0.11
https://github.com/containerd/containerd/releases/tag/v2.0.10
Fixes CVE-2026-47262 & CVE-2026-53488.
https://github.com/containerd/containerd/releases/tag/v2.0.9
Fixes CVE-2026-46680.
https://github.com/containerd/containerd/releases/tag/v2.0.8
Fixes CVE-2026-35469.
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
package/containerd/containerd.hash | 2 +-
package/containerd/containerd.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/containerd/containerd.hash b/package/containerd/containerd.hash
index 0916c603bb..410e5d61e1 100644
--- a/package/containerd/containerd.hash
+++ b/package/containerd/containerd.hash
@@ -1,3 +1,3 @@
# Computed locally
-sha256 2bbf9fedcf4ab31736fcb3ce224ef22610a87da9d53bbd8f6d205710fd849831 containerd-2.0.7-go2.tar.gz
+sha256 eadaa5301c0f633f6fed6a3b22f5cf4343ac522401ad2e84bb3299f811a35976 containerd-2.0.11-go2.tar.gz
sha256 4bbe3b885e8cd1907ab4cf9a41e862e74e24b5422297a4f2fe524e6a30ada2b4 LICENSE
diff --git a/package/containerd/containerd.mk b/package/containerd/containerd.mk
index a334f0fdac..4a3a371ee4 100644
--- a/package/containerd/containerd.mk
+++ b/package/containerd/containerd.mk
@@ -4,7 +4,7 @@
#
################################################################################
-CONTAINERD_VERSION = 2.0.7
+CONTAINERD_VERSION = 2.0.11
CONTAINERD_SITE = $(call github,containerd,containerd,v$(CONTAINERD_VERSION))
CONTAINERD_LICENSE = Apache-2.0
CONTAINERD_LICENSE_FILES = LICENSE
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2
2026-08-16 20:32 [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Bernd Kuhls
@ 2026-08-16 20:32 ` Bernd Kuhls
2026-08-16 22:15 ` Peter Korsgaard
2026-08-16 20:32 ` [Buildroot] [PATCH 3/5] package/docker-compose: bump to version 2.40.3 Bernd Kuhls
` (3 subsequent siblings)
4 siblings, 1 reply; 10+ messages in thread
From: Bernd Kuhls @ 2026-08-16 20:32 UTC (permalink / raw)
To: buildroot; +Cc: Christian Stewart
https://github.com/moby/moby/releases/tag/v28.5.2
Fixes CVE-2025-31133, CVE-2025-52565 & CVE-2025-52881.
https://github.com/moby/moby/releases/tag/v28.5.1
https://github.com/moby/moby/releases/tag/v28.5.0
https://github.com/moby/moby/releases/tag/v28.4.0
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
package/docker-engine/docker-engine.hash | 2 +-
package/docker-engine/docker-engine.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/docker-engine/docker-engine.hash b/package/docker-engine/docker-engine.hash
index 7f305b6880..32bdb45ef5 100644
--- a/package/docker-engine/docker-engine.hash
+++ b/package/docker-engine/docker-engine.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 3727c8963ab4bcff12291e99e4d4a6b9a29ace5236fd245717bbff648f15f8cd docker-engine-28.3.3-go2.tar.gz
+sha256 0e450c03c536a1304ba8fd26ca4c4ff96fac62182fd042fec90ffdf4a0969d40 docker-engine-28.5.2-go2.tar.gz
sha256 7c87873291f289713ac5df48b1f2010eb6963752bbd6b530416ab99fc37914a8 LICENSE
diff --git a/package/docker-engine/docker-engine.mk b/package/docker-engine/docker-engine.mk
index 2df260e1e5..bf2dc588fb 100644
--- a/package/docker-engine/docker-engine.mk
+++ b/package/docker-engine/docker-engine.mk
@@ -4,7 +4,7 @@
#
################################################################################
-DOCKER_ENGINE_VERSION = 28.3.3
+DOCKER_ENGINE_VERSION = 28.5.2
DOCKER_ENGINE_SITE = $(call github,moby,moby,v$(DOCKER_ENGINE_VERSION))
DOCKER_ENGINE_LICENSE = Apache-2.0
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 3/5] package/docker-compose: bump to version 2.40.3
2026-08-16 20:32 [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Bernd Kuhls
2026-08-16 20:32 ` [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2 Bernd Kuhls
@ 2026-08-16 20:32 ` Bernd Kuhls
2026-08-16 22:16 ` Peter Korsgaard
2026-08-16 20:32 ` [Buildroot] [PATCH 4/5] package/docker-cli: bump version to 28.5.2 Bernd Kuhls
` (2 subsequent siblings)
4 siblings, 1 reply; 10+ messages in thread
From: Bernd Kuhls @ 2026-08-16 20:32 UTC (permalink / raw)
To: buildroot; +Cc: Christian Stewart
For release notes since version 2.38.2, see:
https://github.com/docker/compose/releases
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
package/docker-compose/docker-compose.hash | 2 +-
package/docker-compose/docker-compose.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/docker-compose/docker-compose.hash b/package/docker-compose/docker-compose.hash
index a2ffadd31c..fd715c3591 100644
--- a/package/docker-compose/docker-compose.hash
+++ b/package/docker-compose/docker-compose.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 0c0453729b7a37badcf530fc140b1b8b907cbdcecfdb6be6413f410c86665c70 docker-compose-2.38.2-go2.tar.gz
+sha256 cdf70334f2c6afe8fcf1c5d6b4065cd9e8d26dc6317811ce5aabe0f8a0e95951 docker-compose-2.40.3-go2.tar.gz
sha256 58d1e17ffe5109a7ae296caafcadfdbe6a7d176f0bc4ab01e12a689b0499d8bd LICENSE
diff --git a/package/docker-compose/docker-compose.mk b/package/docker-compose/docker-compose.mk
index f70cf725df..17390e6577 100644
--- a/package/docker-compose/docker-compose.mk
+++ b/package/docker-compose/docker-compose.mk
@@ -4,7 +4,7 @@
#
################################################################################
-DOCKER_COMPOSE_VERSION = 2.38.2
+DOCKER_COMPOSE_VERSION = 2.40.3
DOCKER_COMPOSE_SITE = $(call github,docker,compose,v$(DOCKER_COMPOSE_VERSION))
DOCKER_COMPOSE_LICENSE = Apache-2.0
DOCKER_COMPOSE_LICENSE_FILES = LICENSE
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 4/5] package/docker-cli: bump version to 28.5.2
2026-08-16 20:32 [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Bernd Kuhls
2026-08-16 20:32 ` [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2 Bernd Kuhls
2026-08-16 20:32 ` [Buildroot] [PATCH 3/5] package/docker-compose: bump to version 2.40.3 Bernd Kuhls
@ 2026-08-16 20:32 ` Bernd Kuhls
2026-08-16 22:15 ` Peter Korsgaard
2026-08-16 20:32 ` [Buildroot] [PATCH 5/5] package/runc: security bump version to 1.3.6 Bernd Kuhls
2026-08-16 22:15 ` [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Peter Korsgaard
4 siblings, 1 reply; 10+ messages in thread
From: Bernd Kuhls @ 2026-08-16 20:32 UTC (permalink / raw)
To: buildroot; +Cc: Christian Stewart
For consistency with docker-engine. Release notes:
https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0
https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1
https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
package/docker-cli/docker-cli.hash | 2 +-
package/docker-cli/docker-cli.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/docker-cli/docker-cli.hash b/package/docker-cli/docker-cli.hash
index 1424f95752..06758086bd 100644
--- a/package/docker-cli/docker-cli.hash
+++ b/package/docker-cli/docker-cli.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 172dca437abb36485275a8d43550db90b6878bcc676fc0b73a67a57a15026cff docker-cli-28.3.3-go2.tar.gz
+sha256 5864ccdfceef3a9e8ddb29b4a555d5b82a551b5258067aac164b6156c6cfdc08 docker-cli-28.5.2-go2.tar.gz
sha256 2d81ea060825006fc8f3fe28aa5dc0ffeb80faf325b612c955229157b8c10dc0 LICENSE
diff --git a/package/docker-cli/docker-cli.mk b/package/docker-cli/docker-cli.mk
index 8d1b8f1bbe..8ca74af7d0 100644
--- a/package/docker-cli/docker-cli.mk
+++ b/package/docker-cli/docker-cli.mk
@@ -4,7 +4,7 @@
#
################################################################################
-DOCKER_CLI_VERSION = 28.3.3
+DOCKER_CLI_VERSION = 28.5.2
DOCKER_CLI_SITE = $(call github,docker,cli,v$(DOCKER_CLI_VERSION))
DOCKER_CLI_LICENSE = Apache-2.0
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 5/5] package/runc: security bump version to 1.3.6
2026-08-16 20:32 [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Bernd Kuhls
` (2 preceding siblings ...)
2026-08-16 20:32 ` [Buildroot] [PATCH 4/5] package/docker-cli: bump version to 28.5.2 Bernd Kuhls
@ 2026-08-16 20:32 ` Bernd Kuhls
2026-08-16 22:20 ` Peter Korsgaard
2026-08-16 22:15 ` [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Peter Korsgaard
4 siblings, 1 reply; 10+ messages in thread
From: Bernd Kuhls @ 2026-08-16 20:32 UTC (permalink / raw)
To: buildroot; +Cc: Christian Stewart
https://github.com/opencontainers/runc/releases/tag/v1.3.6
Fixes CVE-2026-41579.
Rebased patch due to upstream commits
https://github.com/opencontainers/runc/commit/a8e53f2c6d6d25cb3dd643cc514f118aab44b097
https://github.com/opencontainers/runc/commit/42cfcbe4533a094cbffd23d17dc355bbb25938a1
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
Gitlab pipelines passed:
https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
...ror-checking-functions-with-their-er.patch | 31 ++-----------------
package/runc/runc.hash | 2 +-
package/runc/runc.mk | 2 +-
3 files changed, 5 insertions(+), 30 deletions(-)
diff --git a/package/runc/0001-Replace-os.Is-error-checking-functions-with-their-er.patch b/package/runc/0001-Replace-os.Is-error-checking-functions-with-their-er.patch
index 4e103099f9..6664b62191 100644
--- a/package/runc/0001-Replace-os.Is-error-checking-functions-with-their-er.patch
+++ b/package/runc/0001-Replace-os.Is-error-checking-functions-with-their-er.patch
@@ -35,6 +35,8 @@ Conflicts:
libcontainer/container_linux.go
libcontainer/intelrdt/intelrdt.go
Signed-off-by: Romain Naour <romain.naour@smile.fr>
+[Bernd: rebased for version 1.3.6]
+Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
libcontainer/configs/validate/validator.go | 6 +++---
libcontainer/configs/validate/validator_test.go | 7 ++++---
@@ -286,16 +288,7 @@ diff --git a/libcontainer/rootfs_linux.go b/libcontainer/rootfs_linux.go
index 31d05174..abc372f3 100644
--- a/libcontainer/rootfs_linux.go
+++ b/libcontainer/rootfs_linux.go
-@@ -361,7 +361,7 @@ func mountCgroupV1(m mountEntry, c *mountConfig) error {
- // symlink(2) is very dumb, it will just shove the path into
- // the link and doesn't do any checks or relative path
- // conversion. Also, don't error out if the cgroup already exists.
-- if err := os.Symlink(mc, filepath.Join(c.root, m.Destination, ss)); err != nil && !os.IsExist(err) {
-+ if err := os.Symlink(mc, filepath.Join(c.root, m.Destination, ss)); err != nil && !errors.Is(err, os.ErrExist) {
- return err
- }
- }
-@@ -613,7 +613,7 @@ func mountToRootfs(c *mountConfig, m mountEntry) error {
+@@ -625,7 +625,7 @@ func mountToRootfs(c *mountConfig, m mountEntry) error {
return err
}
if fi, err := os.Lstat(dest); err != nil {
@@ -304,24 +297,6 @@ index 31d05174..abc372f3 100644
return err
}
} else if !fi.IsDir() {
-@@ -910,7 +910,7 @@ func setupDevSymlinks(rootfs string) error {
- src = link[0]
- dst = filepath.Join(rootfs, link[1])
- )
-- if err := os.Symlink(src, dst); err != nil && !os.IsExist(err) {
-+ if err := os.Symlink(src, dst); err != nil && !errors.Is(err, os.ErrExist) {
- return err
- }
- }
-@@ -1132,7 +1132,7 @@ func setReadonly() error {
-
- func setupPtmx(config *configs.Config) error {
- ptmx := filepath.Join(config.Rootfs, "dev/ptmx")
-- if err := os.Remove(ptmx); err != nil && !os.IsNotExist(err) {
-+ if err := os.Remove(ptmx); err != nil && !errors.Is(err, os.ErrNotExist) {
- return err
- }
- if err := os.Symlink("pts/ptmx", ptmx); err != nil {
diff --git a/libcontainer/specconv/spec_linux_test.go b/libcontainer/specconv/spec_linux_test.go
index 66359f79..88156516 100644
--- a/libcontainer/specconv/spec_linux_test.go
diff --git a/package/runc/runc.hash b/package/runc/runc.hash
index d3132b1008..67511d2939 100644
--- a/package/runc/runc.hash
+++ b/package/runc/runc.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 72620f9b0e62d8da80c0c08a6265ab10d24330c544115c30713ba1429bde706d runc-1.3.5-go2.tar.gz
+sha256 8816e8d4181d13012d16733e837425f5f67df57dfac28bc58a68f7dfcd54291b runc-1.3.6-go2.tar.gz
sha256 552a739c3b25792263f731542238b92f6f8d07e9a488eae27e6c4690038a8243 LICENSE
diff --git a/package/runc/runc.mk b/package/runc/runc.mk
index 10ff98c9d7..e0c93baeb9 100644
--- a/package/runc/runc.mk
+++ b/package/runc/runc.mk
@@ -4,7 +4,7 @@
#
################################################################################
-RUNC_VERSION = 1.3.5
+RUNC_VERSION = 1.3.6
RUNC_SITE = $(call github,opencontainers,runc,v$(RUNC_VERSION))
RUNC_LICENSE = Apache-2.0, LGPL-2.1 (libseccomp)
RUNC_LICENSE_FILES = LICENSE
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 10+ messages in thread
* Re: [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11
2026-08-16 20:32 [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Bernd Kuhls
` (3 preceding siblings ...)
2026-08-16 20:32 ` [Buildroot] [PATCH 5/5] package/runc: security bump version to 1.3.6 Bernd Kuhls
@ 2026-08-16 22:15 ` Peter Korsgaard
4 siblings, 0 replies; 10+ messages in thread
From: Peter Korsgaard @ 2026-08-16 22:15 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Christian Stewart
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> https://github.com/containerd/containerd/releases/tag/v2.0.11
> https://github.com/containerd/containerd/releases/tag/v2.0.10
> Fixes CVE-2026-47262 & CVE-2026-53488.
> https://github.com/containerd/containerd/releases/tag/v2.0.9
> Fixes CVE-2026-46680.
> https://github.com/containerd/containerd/releases/tag/v2.0.8
> Fixes CVE-2026-35469.
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2
2026-08-16 20:32 ` [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2 Bernd Kuhls
@ 2026-08-16 22:15 ` Peter Korsgaard
0 siblings, 0 replies; 10+ messages in thread
From: Peter Korsgaard @ 2026-08-16 22:15 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Christian Stewart
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> https://github.com/moby/moby/releases/tag/v28.5.2
> Fixes CVE-2025-31133, CVE-2025-52565 & CVE-2025-52881.
> https://github.com/moby/moby/releases/tag/v28.5.1
> https://github.com/moby/moby/releases/tag/v28.5.0
> https://github.com/moby/moby/releases/tag/v28.4.0
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Buildroot] [PATCH 4/5] package/docker-cli: bump version to 28.5.2
2026-08-16 20:32 ` [Buildroot] [PATCH 4/5] package/docker-cli: bump version to 28.5.2 Bernd Kuhls
@ 2026-08-16 22:15 ` Peter Korsgaard
0 siblings, 0 replies; 10+ messages in thread
From: Peter Korsgaard @ 2026-08-16 22:15 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Christian Stewart
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> For consistency with docker-engine. Release notes:
> https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.4.0
> https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1
> https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.2
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Buildroot] [PATCH 3/5] package/docker-compose: bump to version 2.40.3
2026-08-16 20:32 ` [Buildroot] [PATCH 3/5] package/docker-compose: bump to version 2.40.3 Bernd Kuhls
@ 2026-08-16 22:16 ` Peter Korsgaard
0 siblings, 0 replies; 10+ messages in thread
From: Peter Korsgaard @ 2026-08-16 22:16 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Christian Stewart
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> For release notes since version 2.38.2, see:
> https://github.com/docker/compose/releases
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Buildroot] [PATCH 5/5] package/runc: security bump version to 1.3.6
2026-08-16 20:32 ` [Buildroot] [PATCH 5/5] package/runc: security bump version to 1.3.6 Bernd Kuhls
@ 2026-08-16 22:20 ` Peter Korsgaard
0 siblings, 0 replies; 10+ messages in thread
From: Peter Korsgaard @ 2026-08-16 22:20 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Christian Stewart
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> https://github.com/opencontainers/runc/releases/tag/v1.3.6
> Fixes CVE-2026-41579.
> Rebased patch due to upstream commits
> https://github.com/opencontainers/runc/commit/a8e53f2c6d6d25cb3dd643cc514f118aab44b097
> https://github.com/opencontainers/runc/commit/42cfcbe4533a094cbffd23d17dc355bbb25938a1
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
> Gitlab pipelines passed:
> https://gitlab.com/bkuhls/buildroot/-/commits/99b74ab8c322d7aacf9b9bee370fc273a0dc7fa5
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 10+ messages in thread
end of thread, other threads:[~2026-08-16 22:21 UTC | newest]
Thread overview: 10+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-16 20:32 [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Bernd Kuhls
2026-08-16 20:32 ` [Buildroot] [PATCH 2/5] package/docker-engine: security bump to version 28.5.2 Bernd Kuhls
2026-08-16 22:15 ` Peter Korsgaard
2026-08-16 20:32 ` [Buildroot] [PATCH 3/5] package/docker-compose: bump to version 2.40.3 Bernd Kuhls
2026-08-16 22:16 ` Peter Korsgaard
2026-08-16 20:32 ` [Buildroot] [PATCH 4/5] package/docker-cli: bump version to 28.5.2 Bernd Kuhls
2026-08-16 22:15 ` Peter Korsgaard
2026-08-16 20:32 ` [Buildroot] [PATCH 5/5] package/runc: security bump version to 1.3.6 Bernd Kuhls
2026-08-16 22:20 ` Peter Korsgaard
2026-08-16 22:15 ` [Buildroot] [PATCH 1/5] package/containerd: security bump version to 2.0.11 Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox