Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump runc from v1.1.13 to v1.2.5 #146

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

github-actions[bot]
Copy link

v1.2.5

Tag: v1.2.5
Published at: 2025-02-14T01:19:59Z
URL: Release v1.2.5

Description:

This is the fifth patch release in the 1.2.z series of runc. It
primarily fixes an issue caused by an upstream systemd bug.

  • There was a regression in systemd v230 which made the way we define device
    rule restrictions require a systemctl daemon-reload for our transient
    units. This caused issues for workloads using NVIDIA GPUs. Workaround the
    upstream regression by re-arranging how the unit properties are defined.
    (# 4568, # 4612, # 4615)
  • Dependency github.com/cyphar/filepath-securejoin is updated to v0.4.1,
    to allow projects that vendor runc to bump it as well. (# 4608)
  • CI: fixed criu-dev compilation. (# 4611)
  • Dependency golang.org/x/net is updated to 0.33.0. (# 4632)

Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

Show more

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.


Thanks to the following contributors who made this release possible:

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

Commits
  • 59923ef VERSION: release v1.2.5
  • 165b103 release: explicitly set --keyserver in release signing scripts
  • 66c6d08 Merge pull request # 4632 from lifubang/1.2-bump-xnet-to-0.33.0
  • 615240a build(deps): bump golang.org/x/net from 0.24.0 to 0.33.0
  • d0ed7f7 Merge pull request # 4619 from kolyshkin/1.2-4616

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants