ALT-PU-2023-1519: package cri-o update to version 1.26.2-alt1
Описание
This update upgrades cri-o to version 1.26.2-alt1.
Устраненные уязвимости5
Ссылки4
GHSA-4hj2-r2pm-3hc6
https://github.com/advisories/GHSA-4hj2-r2pm-3hc6GHSA-cm9x-c3rh-7rc4
https://github.com/advisories/GHSA-cm9x-c3rh-7rc4GHSA-phjr-8j92-w5v7
https://github.com/advisories/GHSA-phjr-8j92-w5v7Связанные уязвимости
ALT-PU-2023-1528: package `cri-o` update to version 1.26.2-alt1
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
A flaw was found in cri-o, where containers were incorrectly started w ...