ALSA-2024:2180
- Source
- https://errata.almalinux.org/9/ALSA-2024-2180.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:2180.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2024:2180
- Related
- Published
- 2024-04-30T00:00:00Z
- Modified
- 2024-05-07T14:54:04Z
- Summary
- Moderate: runc security update
- Details
-
The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.
Security Fix(es):
- golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
- golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
- golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
- golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:2180
- https://access.redhat.com/security/cve/CVE-2022-30630
- https://access.redhat.com/security/cve/CVE-2022-30631
- https://access.redhat.com/security/cve/CVE-2022-30632
- https://access.redhat.com/security/cve/CVE-2023-45287
- https://bugzilla.redhat.com/2107342
- https://bugzilla.redhat.com/2107371
- https://bugzilla.redhat.com/2107386
- https://bugzilla.redhat.com/2253193
- https://errata.almalinux.org/9/ALSA-2024-2180.html