Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE Linux Micro 6.0: 2025:20335-1 moderate: runc DoS fix

suse
Calendar Grey May 29, 2025
Dist Suse Esm H88
SUSE Linux Micro 6.0 security patch for containerd addresses a significant DoS flaw impacting overall system performance.
* bsc#1214960 * bsc#1230092 Cross-References: * CVE-2024-45310

Summary

## This update for runc fixes the following issues: * Update to runc v1.2.6. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.2.6 * CVE-2024-45310: Fixed runc can be tricked into creating empty files/directories on host (bsc#1230092) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-332=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * runc-1.2.6-1.1 * runc-debuginfo-1.2.6-1.1

Topics%20covered

Topics Covered

security advisory moderate DoS vulnerability SUSE runc

References

* bsc#1214960

* bsc#1230092

Cross-

* CVE-2024-45310

CVSS scores:

* CVE-2024-45310 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

* CVE-2024-45310 ( NVD ): 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Affected Products:

* SUSE Linux Micro 6.0

An update that solves one vulnerability and has one fix can now be installed.

##

* https://www.suse.com/security/cve/CVE-2024-45310.html

* https://bugzilla.suse.com/show_bug.cgi?id=1214960

* https://bugzilla.suse.com/show_bug.cgi?id=1230092

Announcement ID: SUSE-SU-2025:20335-1
Release Date: May 21, 2025, 3:36 p.m.
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate DoS vulnerability SUSE runc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here