Skip to content
OpenAdvisories
High ELSA-2021-2291 1 CVE

Important: container-tools:2.0 security update (Oracle Linux 8)

Published Jun 10, 2021 · Updated Jun 10, 2021

Ecosystem: Oracle Linux

Summary

runc
[1.0.0-65.rc10]
- fix CVE-2021-30465
- Resolves: #1955650

Fixed packages 21

ReleasePackageFixed in
Oracle Linux · 8 buildah 0:1.11.6-8.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 buildah-tests 0:1.11.6-8.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 cockpit-podman 0:11-1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 conmon 2:2.0.15-1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 container-selinux 2:2.130.0-1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 containernetworking-plugins 0:0.8.3-4.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 containers-common 1:0.1.41-4.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 crit 0:3.12-9.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 criu 0:3.12-9.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 fuse-overlayfs 0:0.7.8-1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 podman 0:1.6.4-26.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 podman-docker 0:1.6.4-26.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 podman-remote 0:1.6.4-26.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 podman-tests 0:1.6.4-26.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 python-podman-api 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 python3-criu 0:3.12-9.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 runc 0:1.0.0-65.rc10.module+el8.4.0+20187+0135169c
Oracle Linux · 8 skopeo 1:0.1.41-4.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 skopeo-tests 1:0.1.41-4.0.1.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 slirp4netns 0:0.4.2-3.git21fdece.module+el8.4.0+20172+38c78bba
Oracle Linux · 8 udica 0:0.2.1-2.module+el8.4.0+20172+38c78bba

Vulnerabilities 1

  • High 7.6
    CVE-2021-30465 EPSS 10%

    mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

    runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange a…

    buildah runc github.com/opencontainers/runc k3s Debian Ubuntu Azure Linux Alpine Go