Alpine/crun: medium 5.6
A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, then change that file's ownership. Affected versions are crun
Action: Upgrade crun to 1.30.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.30.1-r0 | - |
Fixed versions
| 1.30.1-r0 |
Sources
published · modified · JSON