-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 16 Feb 2023 07:16:20 +0800 Source: containerd Architecture: source Version: 1.6.18~ds1-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Shengjing Zhu <zhsj@debian.org> Changes: containerd (1.6.18~ds1-1) unstable; urgency=medium . * New upstream version 1.6.18~ds1 + CVE-2023-25153: OCI image importer memory exhaustion + CVE-2023-25173: Supplementary groups are not set up properly * Install cni-bridge-fp to /usr/lib/cni in autopkgtest Checksums-Sha1: b15be77d718a9eddbff5f64af0b395f295d890bd 4173 containerd_1.6.18~ds1-1.dsc 87c7f7a5fa7d13b5cd912879f06a67d89a876c6a 2096248 containerd_1.6.18~ds1.orig.tar.xz 90105af8215253438285ef4d5ec0c8952e7fc530 20760 containerd_1.6.18~ds1-1.debian.tar.xz 2118af885d141de6b8e52f105e70d73ce3051b9e 12337 containerd_1.6.18~ds1-1_amd64.buildinfo Checksums-Sha256: 0027f49b744aa47e4d092d7301660cd0a880a6633cbd86e98c4532a9c2d0eb94 4173 containerd_1.6.18~ds1-1.dsc 66182de5e6bb69447010bf4a861cfedc6db75e8f65470f8ded0b9ea1aeed0ae2 2096248 containerd_1.6.18~ds1.orig.tar.xz ba403c3759d9a667b35bbb0ae19e87d61316a9ec5b20c467956ddfcbe756543e 20760 containerd_1.6.18~ds1-1.debian.tar.xz d202db6b8b6a7a118e215162729988dc61b3acd24a56a0e12768edc015d2d13a 12337 containerd_1.6.18~ds1-1_amd64.buildinfo Files: 552f7723db178a487673777fc4b4a386 4173 admin optional containerd_1.6.18~ds1-1.dsc b3f46b387a6a24b1c7f8bdd74da189d6 2096248 admin optional containerd_1.6.18~ds1.orig.tar.xz 85de37f9a0c658dbca42a550b4a96d20 20760 admin optional containerd_1.6.18~ds1-1.debian.tar.xz d66bc98d826eb07dbe0e5469abbac86e 12337 admin optional containerd_1.6.18~ds1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCY+2+UQAKCRB/RPol6lUU y2AGAP9bYEYSUud8iSf2pcDWiWqgweTj7RHK1vE4HZEIKPQc1wEAgiFPFTGJ46lZ LOuobfhc/R1pQ0RDHS2/CFQ9ELdWow4= =ZTqM -----END PGP SIGNATURE-----