SUSE_ALP_Standard/patchinfo.20240906090621796529.90520734224245/_patchinfo

29 lines
1.4 KiB
Plaintext

<patchinfo>
<!-- generated from request(s) 343988 -->
<issue tracker="bnc" id="1192051">docker and podman block faccessat2 syscall</issue>
<issue tracker="bnc" id="1214960">ssh slowness when many entries in /proc/mounts (created by containers) ref:_00D1igLOd._5005qVSkHB:ref</issue>
<issue tracker="bnc" id="1221050">runc: runtime/cgo: pthread_create failed: Operation not permitted in bci-base 15.6</issue>
<issue tracker="bnc" id="1230092">VUL-0: CVE-2024-45310: runc: runc can be tricked into creating empty files/directories on host</issue>
<issue tracker="cve" id="2024-45310"/>
<packager>cyphar</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for runc</summary>
<description>This update for runc fixes the following issues:
Update to runc v1.1.14. Upstream changelog is available from
&lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.
- CVE-2024-45310: Fixed that runc can be tricked into creating empty files/directories on host ( bsc#1230092)
Update to runc v1.1.13. Upstream changelog is available from
&lt;https://github.com/opencontainers/runc/releases/tag/v1.1.13&gt;.
- Fixed a performance issue when running lots of containers, caused by systemd getting
too many mount notifications. bsc#1214960
- Fixed -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
</description>
<package>runc</package>
<seperate_build_arch/>
</patchinfo>