Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: d4b4ebd842a9
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: 8cbe73118da0
Choose a head ref
  • 2 commits
  • 1 file changed
  • 2 contributors

Commits on Dec 1, 2020

  1. containerd: 1.4.2 -> 1.4.3 

    Access controls for the shim’s API socket verified that the connecting
process had an effective UID of 0, but did not otherwise restrict
access to the abstract Unix domain socket. This would allow malicious
containers running in the same network namespace as the shim, with an
effective UID of 0 but otherwise reduced privileges, to cause new
processes to be run with elevated privileges.

Fixes: CVE-2020-15257
    @mweinelt
    mweinelt committed Dec 1, 2020
    Copy the full SHA
    8884729 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #105595 from mweinelt/containerd 

    containerd: 1.4.2 -> 1.4.3
    @mweinelt
    mweinelt committed Dec 1, 2020
    Copy the full SHA
    8cbe731 View commit details
    Browse the repository at this point in the history