Red Hat Enterprise Linux 9/crun
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Distrust compromised intermediate certificates in crypto/x509 | rustls-webpkiwebpki-root-certs | Rust / CargoGoRed Hat | High | Fix reported | |
| crun: crun: Arbitrary file creation/overwrite via symlink following | Red Hat Enterprise Linux 10/crunRed Hat Enterprise Linux 8/container-tools:rhel8/crun | Red Hat | High | No fix reported | |
| crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown | Red Hat Enterprise Linux 10/crunRed Hat Enterprise Linux 8/container-tools:rhel8/crun | Red Hat | Medium | No fix reported | |
| crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs | Red Hat Enterprise Linux 10/crunRed Hat Enterprise Linux 8/container-tools:rhel8/crun | Red Hat | Medium | No fix reported |