nixpkgs/pkgs/applications/virtualization
Martin Weinelt 8884729f19
containerd: 1.4.2 -> 1.4.3
Access controls for the shim’s API socket verified that the connecting
process had an effective UID of 0, but did not otherwise restrict
access to the abstract Unix domain socket. This would allow malicious
containers running in the same network namespace as the shim, with an
effective UID of 0 but otherwise reduced privileges, to cause new
processes to be run with elevated privileges.

Fixes: CVE-2020-15257
2020-12-01 17:10:19 +01:00
..
8086tiny formatting: fix missing leading whitespace 2020-06-08 09:37:17 +02:00
aqemu aqemu: use qt5's mkDerivation 2020-04-22 15:23:10 +02:00
arion arion: init at 0.1.0.0 2019-10-24 12:45:07 +02:00
bochs bochs: 2.6.10 -> 2.6.11 2020-03-30 23:29:25 -03:00
charliecloud charliecloud: 0.19 -> 0.20 2020-11-02 08:19:19 -08:00
cloud-hypervisor cloud-hypervisor: init at 0.8.0 2020-07-21 10:11:11 +02:00
cntr treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
conmon conmon: 2.0.20 -> 2.0.21 2020-09-11 06:48:48 +10:00
containerd containerd: 1.4.2 -> 1.4.3 2020-12-01 17:10:19 +01:00
cri-o utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
crosvm crosvm: 79.12607.0.0-rc4 -> 81.12871.0.0-rc1 2020-04-23 09:06:11 +00:00
crun crun: 0.15.1 -> 0.16 2020-11-24 19:35:46 +10:00
docker utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
docker-compose docker-compose: 1.26.2 -> 1.27.4 2020-09-28 08:00:40 +00:00
docker-slim maintainers: rename filalex77 -> Br1ght0ne 2020-11-17 13:09:31 +02:00
driver treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
dumb-init dumb-init: init at 1.2.2 2019-10-17 21:00:00 -05:00
dynamips treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
ecs-agent treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
firecracker firecracker: 0.22.0 -> 0.23.0 2020-11-15 21:28:29 -06:00
firectl buildGoModule packages: set doCheck = false 2020-08-10 16:02:30 +10:00
gvisor buildGoModule packages: remove doCheck = true 2020-08-10 16:02:36 +10:00
hercules maintainers: update name to anna 2020-07-28 19:48:16 -07:00
lkl treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
looking-glass-client looking-glass-client: B1 -> B2 2020-11-07 02:41:16 -06:00
nvidia-docker bug: fix libnvidia-container build (#101665) 2020-11-03 13:17:06 +01:00
open-vm-tools open-vm-tools: 11.1.5 -> 11.2.0 2020-11-11 16:22:41 +01:00
OVMF utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
podman podman: 2.1.0 -> 2.2.0 2020-12-01 22:20:11 +10:00
podman-compose podman-compose: Don't wrap podman 2020-05-22 06:34:25 +01:00
qboot nixos/qemu-vm: add option to use a non-standard BIOS 2020-06-08 11:21:53 +12:00
qemu qemu: fix CVE-2020-29129, CVE-2020-29130 in vendored libslirp 2020-11-28 02:47:44 +01:00
qtemu qtemu: init at 2.1 2020-04-11 18:42:05 -03:00
railcar buildRustPackage: remove platform.all from packages 2020-08-16 12:48:18 +10:00
remotebox treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
runc runc: add wrapper for procps, systemd 2020-11-23 08:46:34 +10:00
seabios seabios: 1.13.0 -> 1.14.0 (#96616) 2020-10-14 11:09:21 +02:00
singularity Merge pull request #105075 from r-ryantm/auto-update/singularity 2020-11-26 23:10:50 +01:00
spice-vdagent vdagent: fixing 90s timeout on shutdown 2020-05-06 09:53:51 +02:00
spike spike: add test to nixosTests 2020-04-22 14:45:12 +02:00
tini tini: fix cross-compilation 2020-07-03 09:21:26 +02:00
tinyemu treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
umoci buildGoModule packages: set doCheck = false 2020-08-10 16:02:30 +10:00
virt-manager utillinux: rename to util-linux 2020-11-24 12:42:06 -05:00
virt-top ocaml-libvirt: 0.6.1.4.2017-11-08-unstable -> 0.6.1.5 2020-11-10 05:57:39 +01:00
virt-viewer virt-viewer: 8.0 -> 9.0 2020-05-10 18:35:50 +00:00
virt-what virt-what: 1.19 -> 1.20 2019-10-08 16:12:53 -07:00
virtinst treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
virtualbox virtualbox: 6.1.14 -> 6.1.16 2020-10-24 02:53:08 +08:00
vpcs treewide: name -> pname (easy cases) (#66585) 2019-08-15 13:41:18 +01:00
x11docker x11docker: 6.6.1 -> 6.6.2 2020-05-21 00:49:18 +00:00
xen Merge pull request #77421 from Shados/xen-build-efi-binaries 2020-11-27 23:49:07 +01:00
xhyve xhyve: add license 2020-06-11 18:27:34 +02:00