Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-9810

Высокий

ALT-PU-2024-9810: package cri-o1.29 update to version 1.29.6-alt1

Источник
errata.altlinux.org
Дата публикации
22.07.2024
Дата обновления
04.02.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades cri-o1.29 to version 1.29.6-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 2 лет назад

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

CVSS3: 8.1
redhat
больше 2 лет назад

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

CVSS3: 8.1
nvd
больше 2 лет назад

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

CVSS3: 8.1
debian
больше 2 лет назад

A flaw was found in cri-o. A malicious container can create a symbolic ...

CVSS3: 8.1
github
больше 2 лет назад

malicious container creates symlink "mtab" on the host External