23.0.9-1

For information on the MCR 23.0.9-1 release and its effect on MKE, refer to the the following technical bulletins:

• MCR Technical Bulletin: runc process.cwd and leaked fds container breakout

• MKE Technical Bulletin: Understanding the Potential Impact and Mitigation of CVE-2024-21626

Important

Launchpad users should confirm that they have installed the latest version before using the product to install MCR 23.0.9-1.

Release date	Name	Upstream release
2024-FEB-08	MCR 23.0.9-1	Moby 23.0.9 and Docker CLI 23.0.9

Changelog

MCR 23.0.9-1 comprises the Moby 23.0.9 upstream release.

Changes specific to MCR

An upgrade to runc 1.1.11-rc1.m1 resolves CVE-2024-21626.

Major component versions

Version detail for the major components that comprise MCR 23.0.9-1 is presented in the table below:

Component	Version
Moby	23.0.9
containerd	1.6.28-rc.1
runc	v1.1.11-rc1.m1
cri-dockerd	0.3.9
buildx	0.12.0m (4932eecc)
Fipster (Go runtime)	go1.20.12m1
buildkit	0.10.7
rootlesskit	1.1.0