Multiple vulnerabilities have been discovered in runC, the worst of which may lead to privilege escalation.
|Package||app-emulation/runc on all architectures|
|Affected versions||< 1.0.0_rc10|
|Unaffected versions||>= 1.0.0_rc10|
RunC is a CLI tool for spawning and running containers according to the OCI specification.
Multiple vulnerabilities have been discovered in runC. Please review the CVE identifiers referenced below for details.
An attacker, by running a malicious Docker image, could escape the container, bypass security restrictions, escalate privileges or cause a Denial of Service condition.
There is no known workaround at this time.
All runC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/runc-1.0.0_rc10"