Vulnerability · Published May 27, 2021 · Assigned by mitre
CVE-2021-30465
High 8.5
In plain English
A high-severity security flaw in the cockpit-podman package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 10.2% (higher than 96% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.5High
Exploit odds (30 days)10.2%top 4.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | cockpit-podman | 29-2.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | cockpit-podman | 29-2.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | cockpit-podman | 11-1.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | cockpit-podman | 11-1.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | conmon | 2:2.0.15-1.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | conmon | 2:2.0.15-1.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | conmon | 2:2.0.26-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | conmon | 2:2.0.26-3.module_el8.7.0+3406+a17c4180 | ALSA-2021:2371 |
| AlmaLinux:8 | container-selinux | 2:2.130.0-1.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | container-selinux | 2:2.130.0-1.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | containernetworking-plugins | 0.9.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | containernetworking-plugins | 0.8.3-4.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | containernetworking-plugins | 0.8.3-4.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | containernetworking-plugins | 0.9.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | containers-common | 1:0.1.41-4.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | containers-common | 1:0.1.41-4.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | crit | 3.12-9.module_el8.5.0+119+9a9ec082 | ALSA-2021:2291 |
| AlmaLinux:8 | crit | 3.12-9.module_el8.4.0+2496+12421f43 | ALSA-2021:2291 |
| AlmaLinux:8 | crit | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | crit | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | crit | 3.12-9.module_el8.3.0+2044+12421f43 | ALSA-2021:2291 |
| AlmaLinux:8 | criu | 3.12-9.module_el8.3.0+2044+12421f43 | ALSA-2021:2291 |
| AlmaLinux:8 | criu | 3.12-9.module_el8.5.0+119+9a9ec082 | ALSA-2021:2291 |
| AlmaLinux:8 | criu | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | criu | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | criu | 3.12-9.module_el8.4.0+2496+12421f43 | ALSA-2021:2291 |
| AlmaLinux:8 | fuse-overlayfs | 1.4.0-2.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | fuse-overlayfs | 0.7.8-1.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | fuse-overlayfs | 0.7.8-1.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | libslirp | 4.3.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | libslirp | 4.3.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | libslirp-devel | 4.3.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | libslirp-devel | 4.3.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | python-podman-api | 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | python-podman-api | 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | python3-criu | 3.12-9.module_el8.3.0+2044+12421f43 | ALSA-2021:2291 |
| AlmaLinux:8 | python3-criu | 3.12-9.module_el8.4.0+2496+12421f43 | ALSA-2021:2291 |
| AlmaLinux:8 | python3-criu | 3.12-9.module_el8.5.0+119+9a9ec082 | ALSA-2021:2291 |
| AlmaLinux:8 | python3-criu | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | python3-criu | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | skopeo | 1:0.1.41-4.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | skopeo | 1:0.1.41-4.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | skopeo-tests | 1:0.1.41-4.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | skopeo-tests | 1:0.1.41-4.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | slirp4netns | 1.1.8-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| AlmaLinux:8 | slirp4netns | 0.4.2-3.git21fdece.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | slirp4netns | 0.4.2-3.git21fdece.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | slirp4netns | 1.1.8-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | toolbox | 0.0.7-1.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | toolbox | 0.0.7-1.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | udica | 0.2.4-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2370 |
| AlmaLinux:8 | udica | 0.2.1-2.module_el8.5.0+2635+e4386a39 | ALSA-2021:2291 |
| AlmaLinux:8 | udica | 0.2.1-2.module_el8.5.0+108+00865455 | ALSA-2021:2291 |
| AlmaLinux:8 | udica | 0.2.4-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:2371 |
| Alpine:v3.20 | k3s | 1.21.1.1-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.21 | k3s | 1.21.1.1-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.22 | k3s | 1.21.1.1-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.23 | k3s | 1.21.1.1-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.24 | k3s | 1.21.1.1-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.20 | runc | 1.0.0_rc95-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.21 | runc | 1.0.0_rc95-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.22 | runc | 1.0.0_rc95-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.23 | runc | 1.0.0_rc95-r0 | ALPINE-CVE-2021-30465 |
| Alpine:v3.24 | runc | 1.0.0_rc95-r0 | ALPINE-CVE-2021-30465 |
| Debian:12 | runc | 1.0.0~rc93+ds1-5 | DEBIAN-CVE-2021-30465 |
| Debian:13 | runc | 1.0.0~rc93+ds1-5 | DEBIAN-CVE-2021-30465 |
| Debian:14 | runc | 1.0.0~rc93+ds1-5 | DEBIAN-CVE-2021-30465 |
| Go | github.com/opencontainers/runc | 1.0.0-rc95 | GHSA-c3xm-pvg7-gh7r |
| Go | github.com/opencontainers/runc | 1.0.0-rc95 | GO-2022-0914 |
| Rocky Linux:8 | buildah | 0:1.19.7-2.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | buildah | 0:1.19.7-1.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | buildah | 0:1.11.6-8.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | cockpit-podman | 0:11-1.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | cockpit-podman | 0:11-1.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | cockpit-podman | 0:11-1.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.6.0+783+10209741 | RLSA-2021:2371 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | conmon | 2:2.0.26-3.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | conmon | 2:2.0.15-1.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | conmon | 2:2.0.15-1.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | conmon | 2:2.0.15-1.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | conmon | 2:2.0.26-1.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | conmon | 2:2.0.26-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | conmon | 2:2.0.26-1.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | conmon | 2:2.0.26-3.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | container-selinux | 2:2.158.0-1.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | container-selinux | 2:2.130.0-1.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | container-selinux | 2:2.130.0-1.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | container-selinux | 2:2.130.0-1.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | container-selinux | 2:2.162.0-1.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.8.3-4.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.8.3-4.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.8.3-4.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.6.0+783+10209741 | RLSA-2021:2371 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | criu | 0:3.12-9.module+el8.5.0+681+c9a1951f | RLSA-2021:2291 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | criu | 0:3.12-9.module+el8.4.0+557+48ba8b2f | RLSA-2021:2291 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.6.0+783+10209741 | RLSA-2021:2371 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | crun | 0:0.18-2.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | crun | 0:0.18-2.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | crun | 0:0.18-2.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | crun | 0:0.18-2.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | fuse-overlayfs | 0:0.7.8-1.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | fuse-overlayfs | 0:0.7.8-1.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | fuse-overlayfs | 0:0.7.8-1.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-3.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.6.0+783+10209741 | RLSA-2021:2371 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.0-1.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.0-2.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | podman | 0:3.0.1-6.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | podman | 0:3.0.1-6.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | podman | 0:3.0.1-7.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | podman | 0:1.6.4-26.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | podman | 0:3.0.1-7.module+el8.5.0+734+8397cf81 | RLSA-2021:2371 |
| Rocky Linux:8 | podman | 0:1.6.4-26.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | python-podman-api | 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | python-podman-api | 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | python-podman-api | 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | runc | 0:1.0.0-65.rc10.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | runc | 0:1.0.0-71.rc92.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | runc | 0:1.0.0-73.rc93.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | skopeo | 1:0.1.41-4.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | skopeo | 1:0.1.41-4.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | skopeo | 1:0.1.41-4.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | skopeo | 1:1.2.2-10.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | skopeo | 1:1.2.2-10.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | skopeo | 1:1.2.2-7.module+el8.4.0+558+7340b765 | RLSA-2021:2370 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.4.0+537+38cf4e42 | RLSA-2021:2370 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.4.0+537+38cf4e42 | RLSA-2021:2371 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.6.0+783+10209741 | RLSA-2021:2371 |
| Rocky Linux:8 | slirp4netns | 0:0.4.2-3.git21fdece.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | slirp4netns | 0:0.4.2-3.git21fdece.module+el8.4.0+536+994a2182 | RLSA-2021:2291 |
| Rocky Linux:8 | slirp4netns | 0:0.4.2-3.git21fdece.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | toolbox | 0:0.0.8-1.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | toolbox | 0:0.0.7-1.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | toolbox | 0:0.0.8-1.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | toolbox | 0:0.0.7-1.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
| Rocky Linux:8 | toolbox | 0:0.0.7-1.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.6.0+783+10209741 | RLSA-2021:2371 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2371 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.4.0+556+40122d08 | RLSA-2021:2371 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.6.0+783+10209741 | RLSA-2021:2370 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2371 |
| Rocky Linux:8 | udica | 0:0.2.1-2.module+el8.4.0+559+c02fa3b2 | RLSA-2021:2291 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.5.0+709+440d5e7e | RLSA-2021:2370 |
| Rocky Linux:8 | udica | 0:0.2.1-2.module+el8.5.0+770+e2f49861 | RLSA-2021:2291 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.4.0+556+40122d08 | RLSA-2021:2370 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:2370 |
| Rocky Linux:8 | udica | 0:0.2.1-2.module+el8.5.0+708+6758137d | RLSA-2021:2291 |
Affected products (as reported)
References
- https://github.com/opencontainers/runc/releases
- [oss-security] 20210519 CVE-2021-30465: runc <1.0.0-rc95 vulnerable to symlink-exchange attack mailing-list
- https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
- FEDORA-2021-2eb67ba3c2 vendor-advisory
- FEDORA-2021-0440f235a0 vendor-advisory
- https://github.com/opencontainers/runc/commit/0ca91f44f1664da834bc61115a849b56d22f595f
- https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
- https://security.netapp.com/advisory/ntap-20210708-0003/
- GLSA-202107-26 vendor-advisory
- [debian-lts-announce] 20230327 [SECURITY] [DLA 3369-1] runc security update mailing-list