19 Commits

Author SHA1 Message Date
chenjiankun
06e6588807 docker: fix CVE-2022-36109
fix #I5QLCS

(cherry picked from commit dde1451e0188d0be7b34c14b277b87dbf24e5581)
2022-09-15 16:28:51 +08:00
chenjiankun
d774ef3f7d docker: Add an ExitPid field for State struct to record exit process id
fix #I5OBUW

(cherry picked from commit c8142e10cf71a5a38616f1a7277ed879e796adca)
2022-09-15 15:05:15 +08:00
chenjiankun
b0de51e996 [sync]docker: fix terminal abnormal after docker run
fix #I5FTB4
fix #I5LDB4
fix #I5OBZ9

(cherry picked from commit b4a83d73a3cdba481691bf29f2f1f17a98d34a14)
2022-09-15 14:16:29 +08:00
chenjiankun
3de9bb5205 fix CVE-2021-41092
fix #I5D1C0
fix CVE-2021-41092

(cherry picked from commit b02354202ecd4d7f7153b7f2bfd971c9674d358c)
2022-06-28 19:30:18 +08:00
chenjiankun
3699f209c3 fix CVE-2021-41091
fix #I5CA8V
fix CVE-2021-41091

(cherry picked from commit 11682acb91cea5b30488f14c5f693391f62fcce6)
2022-06-28 19:30:18 +08:00
chenjiankun
65e2e6f6a5 fix CVE-2021-41089
fix #I5CA8X

(cherry picked from commit 57f2f606bf67d58e1993e0353244a5f6b60cb598)
2022-06-28 19:30:18 +08:00
chenjiankun
f8ffee8d73 close channel in write side to avoid panic in docker stats
fix #I5ATMV

(cherry picked from commit e30932844aeb7d94b6ec1491e63acb0d1a9a2b1a)
2022-06-28 19:30:18 +08:00
chenjiankun
95a9037aa0 fix status inconsistent after restart container
fix #I5AIPF
fix #I5AD5N

(cherry picked from commit e72fc4bf764a9bca988612213a205c9534ca3c6f)
2022-06-28 19:30:18 +08:00
chenjiankun
cf8962ea99 docker: sync from sp1
(cherry picked from commit 660a50e8357f7dae94ab3cda8f42dda3bddf134b)
2022-06-28 15:54:39 +08:00
duyiwei
fbc718add8 fix CVE-2022-24769 2022-06-16 10:05:51 +08:00
xiadanni
931445117a docker:update seccomp whitelist to Linux 5.10 syscall list
reason: update seccomp whitelist to Linux 5.10 syscall list to meet the
requirement that user uses image with new glibc version.

Signed-off-by: xiadanni <xiadanni1@huawei.com>
(cherry picked from commit ff5aa8ab6ec06b5101ef5787ca6f10e3f66c4a0f)
2021-10-12 14:49:09 +08:00
xiadanni
d2de75f5f0 docker:prevent an invalid image from crashing docker daemon
(CVE-2021-21285)

Change-Id: Ic43557af6156beb8b842e2dc9ba20eefa207abc0
Signed-off-by: xiadanni <xiadanni1@huawei.com>
(cherry picked from commit 2a49c58d90a1efd68e87b61a0a475d730875e844)
2021-03-18 15:12:04 +08:00
xiadanni
5fc83aff47 docker:Fix Access to remapped root allows privilege escalation to real root (CVE-2021-21284)
Change-Id: I483f23d368c047147932da22c80cf23c8944669b
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-03-05 11:24:44 +08:00
xiadanni
9fba6cf9d7 docker: sync bugfix and bump version
Change-Id: I8fbbbe26d0279c9921416733ce36da9d57587240
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-03-05 11:24:18 +08:00
jingrui
adcc59f71c docker: sync bugfix
Change-Id: Ida64f926d5d3a2a1f99c8718918737836e256897
Signed-off-by: jingrui <jingrui@huawei.com>
2021-01-18 21:44:33 +08:00
zvier
449e60b25a sync patches from internal
Signed-off-by: liuzekun <liuzekun@huawei.com>
2020-11-28 11:20:04 +08:00
Grooooot
e7de2c79b3 docker: add patches
Signed-off-by: Grooooot <isula@huawei.com>
2020-03-05 15:13:09 +08:00
dogsheng
be56a4fe89 Package init 2019-12-25 19:10:46 +08:00
overweight
6138d366d1 Package init 2019-09-30 10:37:25 -04:00