runC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in runC, the worst of which may lead to privilege escalation. runC 2020-03-15 2020-03-15 677744 709456 711182 local, remote 1.0.0_rc10 1.0.0_rc10

RunC is a CLI tool for spawning and running containers according to the OCI specification.

Multiple vulnerabilities have been discovered in runC. Please review the CVE identifiers referenced below for details.

An attacker, by running a malicious Docker image, could escape the container, bypass security restrictions, escalate privileges or cause a Denial of Service condition.

There is no known workaround at this time.

All runC users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/runc-1.0.0_rc10" CVE-2019-16884 CVE-2019-19921 CVE-2019-5736 whissi whissi