[Backport 7.53.x] [kitchen/e2e] update amazon linux 2023 x86_64 #25772
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Backport 654e4bf from #25707.
What does this PR do?
ami-0bb84b8ffd87024d8
, Amazon Linux 2023 x86_64, targetingrunc-1.1.11-1.amzn2023.0.1.src.rpm
ami-04b395c05193adbbd
fromal2023-ami-2023.4.20240513.0-kernel-6.1-arm64
targetingrunc-1.1.11-1.amzn2023.0.1.src.rpm
Motivation
Previous hosts are affected by https://nvd.nist.gov/vuln/detail/CVE-2024-21626
Incident-27459
Incident-27490
The previous Amazon Linux 2023 x86_64 in use in our e2e tests had a security vulnerability due to the version of
runc
, installed atdocker
install within the agent security kitchen tests.The CVE mentions that the vulnerability is fixed in
runc 1.1.12+
, but for Amazon Linux 2023 this is fixed inrunc-1.1.11-1.amzn2023.0.1+
, as mentioned in https://alas.aws.amazon.com/AL2023/ALAS-2024-501.htmlAdditional Notes
Possible Drawbacks / Trade-offs
Describe how to test/QA your changes
~/dd/test-infra-definitions
yum info runc
and ensure the target package version isrunc-1.1.11-1.amzn2023.0.1.src.rpm
inv destroy-vm -y
yum info runc
and ensure the target package version isrunc-1.1.11-1.amzn2023.0.1.src.rpm
inv destroy-vm -y