Update RUNNER_IMAGES_VERSION to 0.0.34

Ashvin Sharmarequested to merge
ashvins/cve-2025-45582-exploit into main

What does this MR do?

Update RUNNER_IMAGES_VERSION to 0.0.34

Why was this MR needed?

What's the best way to test this MR?

Run

docker run --rm --entrypoint "" <built-image> cat /var/lib/rpm/rpmdb.sqlite 2>/dev/null | strings | grep -i "tar-1.34"

It should show you tar-1.34-9.el9_7 which is the patched version (source: https://access.redhat.com/errata/RHSA-2026:0067).

What are the relevant issue numbers?

https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/38923

https://gitlab.com/gitlab-org/gitlab-runner/-/work_items/38924

Edited by Ashvin Sharma

Merge request reports