tocsin

Alpine/crun: unknown

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation

Action: Upgrade crun to 1.20-r0 or later.

Affected

introducedfixedlast affected
01.20-r0-

Fixed versions

1.20-r0

Sources

published · modified · JSON