Skip to content
OpenAdvisories
Medium ELSA-2024-6188 1 CVE

Moderate: runc security update (Oracle Linux 9)

Published Sep 3, 2024 · Updated Sep 3, 2024

Ecosystem: Oracle Linux

Summary

[4:1.1.12-4]
- rebuild for CVE-2024-24783
- Resolves: RHEL-28439

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 runc 4:1.1.12-4.el9_4

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-24783

    Verify panics on certificates with an unknown public key algorithm in crypto/x509

    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go