From 6524246c68d68d792051e5401dd9126bda1b979f Mon Sep 17 00:00:00 2001 From: lifubang Date: Wed, 26 Nov 2025 15:38:25 +0000 Subject: [PATCH 1/2] VERSION: release 1.2.9 Signed-off-by: lifubang Signed-off-by: Aleksa Sarai --- CHANGELOG.md | 22 +++++++++++++++++++++- VERSION | 2 +- 2 files changed, 22 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index bdda19dfb..6eb26fea4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased 1.2.z] +## [1.2.9] - 2025-11-27 + +> Stars hide your fires, let me rest tonight. + +### Fixed + * libct: fix mips compilation. (#4962, #4965) + * When configuring a `tmpfs` mount, only set the `mode=` argument if the + target path already existed. This fixes a regression introduced in our + [CVE-2025-52881][] mitigation patches. (#4971, #4974) + * Fix various file descriptor leaks and add additional tests to detect them as + comprehensively as possible. (#5007, #5021, #5027) + +### Changed + * Downgrade `github.com/cyphar/filepath-securejoin` dependency to `v0.5.2`, + which should make it easier for some downstreams to import `runc` without + pulling in too many extra packages. (#5027) + +[CVE-2025-52881]: https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm + ## [1.2.8] - 2025-11-05 > 鳥籠の中に囚われた屈辱を @@ -1089,7 +1108,8 @@ implementation (libcontainer) is *not* covered by this policy. [1.1.0-rc.1]: https://github.com/opencontainers/runc/compare/v1.0.0...v1.1.0-rc.1 -[Unreleased 1.2.z]: https://github.com/opencontainers/runc/compare/v1.2.8...release-1.2 +[Unreleased 1.2.z]: https://github.com/opencontainers/runc/compare/v1.2.9...release-1.2 +[1.2.9]: https://github.com/opencontainers/runc/compare/v1.2.8...v1.2.9 [1.2.8]: https://github.com/opencontainers/runc/compare/v1.2.7...v1.2.8 [1.2.7]: https://github.com/opencontainers/runc/compare/v1.2.6...v1.2.7 [1.2.6]: https://github.com/opencontainers/runc/compare/v1.2.5...v1.2.6 diff --git a/VERSION b/VERSION index 0de7de715..9d4f8239d 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.2.8+dev +1.2.9 From 4ab771fcee2fd92074e63c62975c1e57cdb9dc59 Mon Sep 17 00:00:00 2001 From: lifubang Date: Wed, 26 Nov 2025 15:38:54 +0000 Subject: [PATCH 2/2] VERSION: back to development Signed-off-by: lifubang Signed-off-by: Aleksa Sarai --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 9d4f8239d..baa91c0ad 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.2.9 +1.2.9+dev