Go/github.com/cri-o/cri-o: medium
Sysctls applied to containers with host IPC or host network namespaces can affect the host
Action: Upgrade github.com/cri-o/cri-o to 1.19.5 or later.
go get github.com/cri-o/cri-o@v1.23.1go get github.com/cri-o/cri-o@v1.22.2go get github.com/cri-o/cri-o@v1.21.5go get github.com/cri-o/cri-o@v1.20.6go get github.com/cri-o/cri-o@v1.19.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.23.0 | 1.23.1 | - |
| 1.22.0 | 1.22.2 | - |
| 1.21.0 | 1.21.5 | - |
| 1.20.0 | 1.20.6 | - |
| 1.18.0 | 1.19.5 | - |
Fixed versions
| 1.23.1 | 1.22.2 | 1.21.5 | 1.20.6 | 1.19.5 |
Sources
- osv: GHSA-w2j5-3rcx-vx7x
- https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x
- https://github.com/cri-o/cri-o
published · modified · JSON