ESSA-2024:0027: Moderate: SUSE Liberty Linux security update for runc

[Update Advisories for SUSE Liberty Linux]

# security update for runc

Announcement ID: ESSA-2024:0027
Rating: Moderate
References:

  * bsc#1240234



Cross-References:

  * CVE-2024-21626



CVSS scores:

  * CVE-2024-21626 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products:

  * SUSE Liberty Linux 7 LTSS


An update that solves one vulnerability and has one bug fix can now be installed.

## Description:

The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime. Security Fix(es): runc: file descriptor leak (CVE-2024-21626).

## Package List:

  * SUSE Liberty Linux 7 LTSS:
    * runc 1.0.0-70.rc10.el7_9

## References:

  * https://www.suse.com/security/cve/CVE-2024-21626.html