[CLSA-2026:1791483409] runc: Fix of CVE-2026-41579
Type:
security
Severity:
Important
Release date:
2026-10-09 08:22:08 UTC
Description:
- CVE-2026-41579: symlink escape in /dev setup and mountCgroupV1() - Build with GOFIPS140=off: golang 1.26.7-2.el9_8 defaults to certified, which cannot unpack its FIPS module under the read-only /usr/share/gocode GOPATH
CVEs fixed:
Updated packages:
  • runc-1.4.2-3.el9_8.tuxcare.els1.aarch64.rpm
    sha:72fbed6837962122397381f82f18b64baf297ee2cecc4ab3e1cbb57688f76185
  • runc-1.4.2-3.el9_8.tuxcare.els1.x86_64.rpm
    sha:d3cfa93403c270a18da5d1102b4539bcc9cbfc5796655686ded22598b5f68d60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.