Skip to content

Commit fec1599

Browse files
author
Ashvin Sharma
committed
Update RUNNER_IMAGES_VERSION to 0.0.34 to fix CVE-2025-45582
Bumps base images to include patched tar (1.34-9.el9_7) which fixes a directory traversal vulnerability in GNU Tar. Changelog: security
1 parent d8ad62e commit fec1599

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.gitlab/ci/_common.gitlab-ci.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ variables:
44
# or the 'docs:check development docs Go version' job will fail
55
GO_VERSION: "1.25.5"
66
RUNNER_IMAGES_REGISTRY: registry.gitlab.com/gitlab-org/ci-cd/runner-tools/base-images
7-
RUNNER_IMAGES_VERSION: "0.0.32"
7+
RUNNER_IMAGES_VERSION: "0.0.34"
88
RUNNER_IMAGES_WINDOWS_GO_URL: https://gitlab.com/api/v4/projects/gitlab-org%2fci-cd%2frunner-tools%2fbase-images/packages/generic/runner-images/v${RUNNER_IMAGES_VERSION}/golang-windows-amd64.zip
99
CI_IMAGE: "${RUNNER_IMAGES_REGISTRY}/ci:${RUNNER_IMAGES_VERSION}"
1010
DOCS_LINT_IMAGE: registry.gitlab.com/gitlab-org/technical-writing/docs-gitlab-com/lint-markdown:alpine-3.22-vale-3.13.0-markdownlint2-0.19.0-lychee-0.21.0

0 commit comments

Comments
 (0)