<patchinfo incident="62">
  <!-- generated from request(s) 343988 -->
  <issue tracker="bnc" id="1192051">docker and podman block faccessat2 syscall</issue>
  <issue tracker="bnc" id="1214960">ssh slowness when many entries in /proc/mounts (created by containers) ref:_00D1igLOd._5005qVSkHB:ref</issue>
  <issue tracker="bnc" id="1221050">runc: runtime/cgo: pthread_create failed: Operation not permitted in bci-base 15.6</issue>
  <issue tracker="bnc" id="1230092">VUL-0: CVE-2024-45310: runc: runc can be tricked into creating empty files/directories on host</issue>
  <issue tracker="cve" id="2024-45310"/>
  <packager>cyphar</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for runc</summary>
  <description>This update for runc fixes the following issues:

Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.

- CVE-2024-45310: Fixed that runc can be tricked into creating empty files/directories on host ( bsc#1230092)

Update to runc v1.1.13. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.13&gt;.

- Fixed a performance issue when running lots of containers, caused by systemd getting
  too many mount notifications. bsc#1214960
- Fixed -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
</description>
  <package>runc</package>
  <seperate_build_arch/>
</patchinfo>