update to docker 19.03.6 and runc 1.0.0-rc10
Bug #1863669 reported by
Michael Hudson-Doyle
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
docker.io (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Eoan |
Fix Released
|
Undecided
|
Unassigned | ||
runc (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Eoan |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
I forgot to mention it in the changelog but the runc update fixes CVE-2019-19921.
The containerd update to 1.3.1 is being tracked in bug 1854841.
[test case]
per https:/
[regression potential]
As usual, we deliver most benefit to our users by delivering an upstream experience. A risk of regressions is part of that.
CVE References
Changed in docker.io (Ubuntu): | |
status: | New → Fix Committed |
Changed in runc (Ubuntu): | |
status: | New → Fix Committed |
tags: |
added: verification-done-bionic verification-done-eoan removed: verification-needed verification-needed-bionic verification-needed-eoan |
Changed in runc (Ubuntu): | |
status: | Fix Committed → Fix Released |
Changed in docker.io (Ubuntu): | |
status: | Fix Committed → Fix Released |
tags: |
added: verification-done verification-done-eoan removed: verification-needed verification-needed-eoan |
tags: |
added: verification-done-bionic removed: verification-done verification-needed-bionic |
To post a comment you must log in.
Hello Michael, or anyone else affected,
Accepted runc into eoan-proposed. The package will build now and be available at https:/ /launchpad. net/ubuntu/ +source/ runc/1. 0.0~rc10- 0ubuntu1~ 19.10.1 in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.
If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification- needed- eoan to verification- done-eoan. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification- failed- eoan. In either case, without details of your testing we will not be able to proceed.
Further information regarding the verification process can be found at https:/ /wiki.ubuntu. com/QATeam/ PerformingSRUVe rification . Thank you in advance for helping!
N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.