[ALSA-2024:4762] Important: runc security update
Type:
security
Severity:
important
Release date:
2024-07-24
Description:
The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 runc-1.1.12-3.el9_4.aarch64.rpm d3c39b2d2ca49c759ea1cdcea04def093a770a55caf3bcc60a4e702a2b37979f
ppc64le runc-1.1.12-3.el9_4.ppc64le.rpm 495af6ac37eb16549b14d1c8e569073be123c0f0b984bfdb512ec6926647d886
s390x runc-1.1.12-3.el9_4.s390x.rpm 3dea5554aed2bb494195bb4457523cee40e766290815436849188e3a17dfe685
x86_64 runc-1.1.12-3.el9_4.x86_64.rpm 48b7f9afed2eb6f433347a838d9aaccf4e9ac81f1edf182db6e7617c0f15be90
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.