From fa4a9702be2a2707e7d7345272d58ff9e381f393 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Tue, 5 Oct 2021 09:51:39 +0200 Subject: [PATCH] Update containerd binary to v1.5.7 The seventh patch release for containerd 1.5 is a security release to fix CVE-2021-41103. Notable Updates: - Fix insufficiently restricted permissions on container root and plugin directories GHSA-c2h3-6mxw-7mvq Signed-off-by: Sebastiaan van Stijn --- Dockerfile.windows | 2 +- hack/dockerfile/install/containerd.installer | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile.windows b/Dockerfile.windows index fe61464f5c..861572ec57 100644 --- a/Dockerfile.windows +++ b/Dockerfile.windows @@ -166,7 +166,7 @@ FROM microsoft/windowsservercore SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"] ARG GO_VERSION=1.17.2 -ARG CONTAINERD_VERSION=1.5.6 +ARG CONTAINERD_VERSION=1.5.7 ARG GOTESTSUM_VERSION=v1.7.0 # Environment variable notes: diff --git a/hack/dockerfile/install/containerd.installer b/hack/dockerfile/install/containerd.installer index 3660c32d55..94e82cfdc1 100755 --- a/hack/dockerfile/install/containerd.installer +++ b/hack/dockerfile/install/containerd.installer @@ -15,7 +15,7 @@ set -e # the binary version you may also need to update the vendor version to pick up # bug fixes or new APIs, however, usually the Go packages are built from a # commit from the master branch. -: "${CONTAINERD_VERSION:=v1.5.6}" +: "${CONTAINERD_VERSION:=v1.5.7}" install_containerd() ( echo "Install containerd version $CONTAINERD_VERSION"