b203de4f7d
Set OOMScoreAdjust to -999 for containerd ( #6819 )
2023-12-22 16:14:13 -08:00
e87fb99c84
Fix CVE-2020-8694, CVE-2020-8695 and CVE-2020-12912 ( #7029 )
...
Fixes moby-engine and moby-containerd by upgrade
2023-12-20 20:40:33 +05:30
d82493a5f9
golang: bump golang 1.19.12 -> 1.20.7 ( #6001 )
...
Bump following packages:
- golang: 1.19.12 -> 1.20.7
- moby-cli: 20.10.24 -> 20.10.25
- moby-engine: 20.10.24 -> 20.10.25
- moby-containerd:1.6.18 -> 1.6.22
- moby-runc: 1.1.5 -> 1.1.9
This PR fixes docker `http: invalid Host header` error and
bootstraps the go1.20 compiler with go1.19.12 instead of go1.4
Reference: https://go.dev/doc/go1.20#bootstrap
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-08-21 22:31:35 +05:30
1a316eb216
[AUTOPATCHER-CORE] Upgrade moby-containerd to 1.6.18 to fix CVE-2023-25173, CVE-2023-25153 - ( #5068 )
...
* Upgrade moby-containerd to 1.6.18 to fix CVE-2023-25173, CVE-2023-25153
* update commit hash to match version 1.6.18
2023-03-13 12:39:41 -07:00
8cd9b00d73
upgrade moby-containerd to 1.6.12 to fix CVE-2022-23471 ( #4449 )
2022-12-14 13:03:22 -08:00
c24c3910f8
`moby-containerd`: upgrade to version 1.6.6 to fix CVE-2022-31030 ( #3230 )
2022-06-23 20:25:45 -07:00
d76052103a
golang: bump version to 1.18.3 to address CVE-2022-24675 & CVE-2022-28327 ( #3163 )
...
* golang: rename specfile golang-1.17.spec -> golang.spec
* golang: bump version to 1.18.3 to address CVE-2022-24675 & CVE-2022-28327
* golang: bump release of dependent packages to force rebuild
* keda: verify license
* helm: verify license
* moby-containerd: bump version to 1.6.2 to address CVE-2022-24769
* golang: add go-1.17.10 to enable cert-manager
* cert-manger: add a hard BR on golang <= 1.17.10
* golang-17: add entry to cgimanifest
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2022-06-16 23:07:41 +05:30
04df64f203
move docker to systemd cgroup by default ( #2606 )
...
Co-authored-by: Nicolas Guibourge <nicolasg@microsoft.com>
2022-03-29 16:10:48 -07:00
3a3b6dd0db
enable containerd service restart ( #2577 )
2022-03-23 16:48:33 -07:00
4d1bc49e66
Upgrade moby-containerd to 1.6.1 ( #2486 )
...
Co-authored-by: Nicolas Guibourge <nicolasg@microsoft.com>
2022-03-21 10:03:14 -07:00
f3d088f10b
fix wrong version for moby-containerd ( #2143 )
...
Co-authored-by: nicolas guibourge <nicolasg@microsoft.com>
2022-02-08 10:12:25 -08:00
e8d4468606
upgrade moby-buildx, moby-runc, moby-containerd, moby-cli, moby-engine ( #2124 )
...
* upgrade moby-buildx
* upgrade moby-buildx
* upgrade moby-buildx
* upgrade moby-runc
* upgrade moby-runc
* upgrade moby-containerd
* upgrade moby-containerd
* upgrade moby-containerd
* upgrade moby-cli
* upgrade moby-engine
* Makes moby-engine spec relying on tini to provide docker-init
* upgrade moby-engine
* upgrade moby-engine
* add %check in moby-runc.spec
* address PR check
Co-authored-by: nicolas guibourge <nicolasg@microsoft.com>
2022-02-08 08:53:21 -08:00
5a14914378
Update moby-containerd to 1.5.9 ( #1994 )
2022-01-25 11:51:48 -08:00
17b0e93e71
Merge 1.0 to dev branch
...
This merge brings the latest SELinux and many packages and CVE fixes from the 1.0 branch.
2021-08-19 13:46:51 -07:00
b877013b27
Initial CBL-Mariner commit to GitHub
2020-08-06 20:17:52 -07:00
raviprpandey
Rohit Rawat
Muhammad Falak R Wani
CBL-Mariner-Bot
Henry Beberman
nicolas guibourge
angop95
jslobodzian