Description:
The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.
Security Fix(es):
* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
runc-1.1.9-2.el9_3.aarch64.rpm |
1d149b8d0b0ba35129ee27e2ad9deb248bca0d7d1750aace17601044d98b361f |
ppc64le |
runc-1.1.9-2.el9_3.ppc64le.rpm |
125d30c382147e99f51967443cb1811f98996de7008fa8faf8f9a3f314627c2d |
s390x |
runc-1.1.9-2.el9_3.s390x.rpm |
940f6140a2213d5d8a89c85c2481b38190cd4f460eb795ffffc9ee3159a74251 |
x86_64 |
runc-1.1.9-2.el9_3.x86_64.rpm |
074bdacce30b7266aec255a5c040e49b3a2b7d9de55eac6d8f0ef39ad3ad7612 |