Skip to content
OpenAdvisories
Low ELSA-2022-8090 1 CVE

Low: runc security update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[4:1.1.4-1]
- update to https://github.com/opencontainers/runc/releases/tag/v1.1.4
- Related: #2061316

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 runc 4:1.1.4-1.el9

Vulnerabilities 1

  • Medium 5.9
    CVE-2022-29162

    Incorrect Default Permissions in runc

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an aty…

    opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go