Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v0.11] Backport CVE-2024-23653 #4638

Closed
wants to merge 2 commits into from
Closed

[v0.11] Backport CVE-2024-23653 #4638

wants to merge 2 commits into from

Commits on Feb 9, 2024

  1. gateway: pass executor with build and not access worker directly 

    Running interactive container APIs was done by giving
the gateway implementation access to worker controller
directly, but it should be passed with a build job instead.

Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit 0971dffaab93d91e51af984b44c745b35b3c5b4d)
(cherry picked from commit 0c5daa2)
    @tonistiigi @dcermak
    tonistiigi authored and dcermak committed Feb 9, 2024
    Configuration menu
    Copy the full SHA
    104dc5f View commit details
    Browse the repository at this point in the history

  2. llbsolver: make sure interactive container API validates entitlements 

    Ensure interactive calls validate same conditions that
the build requests do. Refactor of the build side is to ensure
we use the same validation function for both cases. There
was no validation issue with the LLB validation.

Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit d1970522d7145be5f4a1f1a028b1910bb527126c)
(cherry picked from commit 65c3c9c)
    @tonistiigi @dcermak
    tonistiigi authored and dcermak committed Feb 9, 2024
    Configuration menu
    Copy the full SHA
    35615b9 View commit details
    Browse the repository at this point in the history