Patches CVE-2024-24790 by upgrading to 27-0-3 tag. However, the patched version has CVE-2024-24791 😟 and it doesnt have patch.

Test plan

Build and test image locally.

Instruction to build and test locally

• Go to dev/oci_deps.bzl
• Find the current tag example docker:26.1.3-dind
• Go to docker registry and search for updated tag and grab one example: docker:27.0.3-dind
• docker pull --platform linux/amd64 docker:27.0.3-dind
• Add platforms = ["linux/amd64"], to the oci_pull for building and testing locally

  oci_pull(
        name = "upstream_dind_base",
        digest = "sha256:2632da0d24924b179adf1c2e6f4ea6fb866747e84baea6b2ffaa8bff982ce102",
        platforms = ["linux/amd64"],
    )

• Run sg images build dind
• For testing, run docker run --rm -it --entrypoint /bin/sh -v /var/run/docker.sock:/var/run/docker.sock dind:candidate
• Test docker commands and pull and run image for testing

Changelog

• Upgraded dind to 27.0.3 to patch CVE-2024-24790 vulnerability