runC: Container breakout

Background

runC is a CLI tool for spawning and running containers according to the OCI specification.

Description

A vulnerability in runC could allow an attacker to achieve privilege escalation if specific mount configuration prerequisites are satisfied.

Impact

An attacker may be able to escalation privileges to gain access to the host system.

Workaround

There is no known workaround at this time.

Resolution

All runC users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-emulation/runc-1.0.0_rc95"