d-utils

simple utils to use docker images without docker
git clone https://git.ce9e.org/d-utils.git

commit
79c0d0dbf4ba4999ee5f8049189d41c4a98dd479
parent
b9aa0e80f2bcdd3380d7e52279299d6a2c8dd300
Author
Tobias Bengfort <tobias.bengfort@posteo.de>
Date
2024-04-19 19:20
security: d-run: prevent cmd to pass options to bwrap

see https://cve.circl.lu/cve/CVE-2024-32462

Diffstat

M d-run 1 +

1 files changed, 1 insertions, 0 deletions


diff --git a/d-run b/d-run

@@ -92,6 +92,7 @@ def build_cmd(dir, config):
   92    92 	if config.get('Entrypoint'):
   93    93 		cmd += config['Entrypoint']
   94    94 
   -1    95 	cmd.append('--')
   95    96 	cmd += config['Cmd']
   96    97 
   97    98 	return cmd