Поиск уязвимостей

Important: container-tools:rhel8 security and bug fix update

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.

ELSA-2021-9203: runc bug fix update (IMPORTANT)

ELSA-2019-4540: runc security update (IMPORTANT)

ELSA-2019-0975: container-tools:ol8 security and bug fix update (IMPORTANT)

Уязвимость инструмента для запуска изолированных контейнеров runc, связанная с ошибками обработки файлового дескриптора, позволяющая нарушителю выполнить произвольный код

ALT-PU-2021-2029: package `runc` update to version 1.0.0-alt17.rc95

ALT-PU-2021-2028: package `containerd` update to version 1.4.6-alt1

Security update for lxc, lxcfs

ELSA-2019-4551: docker-engine security update (IMPORTANT)

ELSA-2019-4550: docker-engine security update (IMPORTANT)

ALT-PU-2019-1233: package `lxc` update to version 3.0.3-alt3

ALT-PU-2019-1230: package `containerd` update to version 1.2.3-alt1

ALT-PU-2019-1229: package `runc` update to version 1.0.0-alt7.git0a012df

ALT-PU-2019-1217: package `pve-lxc` update to version 3.1.0-alt2

ALT-PU-2019-1215: package `lxc` update to version 3.0.3-alt2

Security update for containerd, docker, runc

Security update for containerd, docker, runc

Security update for containerd, docker, runc

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork