Skip to content
OpenAdvisories
High ELSA-2024-12148 1 CVE

Important: runc security update (Oracle Linux 7)

Published Feb 9, 2024 · Updated Feb 9, 2024

Ecosystem: Oracle Linux

Summary

[1.1.12-1]
- Update runc to 1.1.12 [JIRA: OLDIS-30530]

[1.1.10-1]
- Update runc to 1.1.10 [JIRA: OLDIS-30530]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 runc 3:1.1.12-1.el7

Vulnerabilities 1

  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go