TI-2024-14351 CVE-2024-21626 · GHSA-xr7r-f8xq-vfvv
runc container breakout through process.cwd trickery and leaked fds
Priority HIGH 72
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification.
RHSA-2024:0760
container-tools:3.0 security update
Released 2024-02-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0, buildah-tests-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0 +40
- Red Hat Enterprise Linux AppStream E4S (v.8.4) buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.ppc64le::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0, buildah-tests-1.19.9-1.module+el8.4.0+21078+a96cfbf6.x86_64::container-tools:3.0 +40