RHSA-2023:6380 -- Redhat runcID: oval:org.secpod.oval:def:508080 | Date: (C)2024-01-02 (M)2024-02-26 |
Class: PATCH | Family: unix |
The runC tool is a lightweight, portable implementation of the Open Container Format that provides container runtime. Security Fix: golang: crypto/tls: large handshake records may cause panics runc: Rootless runc makes `/sys/fs/cgroup` writable runc: volume mount race condition runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.
Platform: |
Red Hat Enterprise Linux 9 |