Skip to content
OpenAdvisories
High ALSA-2021:2371 1 CVE

Important: container-tools:rhel8 security update

Published Jun 10, 2021 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* runc: vulnerable to symlink exchange attack (CVE-2021-30465)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 10

ReleasePackageFixed in
AlmaLinux · 8 cockpit-podman 29-2.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 conmon 2:2.0.26-3.module_el8.7.0+3406+a17c4180
AlmaLinux · 8 containernetworking-plugins 0.9.1-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 crit 3.15-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 criu 3.15-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 libslirp 4.3.1-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 libslirp-devel 4.3.1-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 python3-criu 3.15-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 slirp4netns 1.1.8-1.module_el8.6.0+2876+9ed4eae2
AlmaLinux · 8 udica 0.2.4-1.module_el8.6.0+2876+9ed4eae2

Vulnerabilities 1

  • High 7.6
    CVE-2021-30465 EPSS 10%

    mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

    runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange a…

    buildah runc github.com/opencontainers/runc k3s Debian Ubuntu Azure Linux Alpine Go

References

  • report
    https://vulners.com/cve/CVE-2021-30465