Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-5517

Высокий

ALT-PU-2026-5517: package crun update to version 1.27-alt1

Источник
errata.altlinux.org
Дата публикации
02.04.2026
Дата обновления
26.05.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades crun to version 1.27-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 7.8
ubuntu
8 месяцев назад

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.

CVSS3: 7.8
redhat
8 месяцев назад

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.

CVSS3: 7.8
nvd
8 месяцев назад

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.

CVSS3: 7.8
debian
8 месяцев назад

crun is an open source OCI Container Runtime fully written in C. In ve ...

CVSS3: 7.8
redos
6 месяцев назад

Уязвимость crun