kata-containers/agent

vendor: upgrade libcontainers/runc

Closed this issue · 0 comments

It has happened a lot in opencontainers/runc since the last release. They don't tag new versions that often (v1.0.0 is not released yet), so using a sha is necessary. This will e.g. fix problems when running linux v5.0+ kernels on AArch64.

Diff:
opencontainers/runc@f56b4cb...f4982d8

The indirect dependencies in agent because of runc should also be upgraded. Here is the changelog of seccomp/libseccomp-go:

v0.9.1 CHANGELOG:
Minimum supported version of libseccomp bumped to v2.2.0
Use Libseccomp's seccomp_version API to retrieve library version
Unconditionally set TSync attribute for filters, due to Go's heavily threaded nature
Fix CVE-2017-18367 - Multiple syscall arguments were incorrectly combined with logical-OR, instead of logical-AND
Fix a failure to build on Debian-based distributions due to CGo code
Fix unit test failures on 32-bit architectures
Improve several errors to be more verbose about their causes
Add support for SCMP_ACT_LOG (with libseccomp versions 2.4.x and higher), permitting syscalls but logging their execution
Add support for SCMP_FLTATR_CTL_LOG (with libseccomp versions 2.4.x and higher), logging not-allowed actions when they are denied