File _patchinfo of Package patchinfo.22070

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.22070

<patchinfo incident="22070">
  <issue tracker="bnc" id="1193436">VUL-1: CVE-2021-43784: runc: integer overflow in runc's netlink bytemsg allows malicious configuration to discreetly modify container configuration</issue>
  <issue tracker="cve" id="2021-43784"/>
  <packager>cyphar</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for runc</summary>
  <description>This update for runc fixes the following issues:

Update to runc v1.0.3. 
    
* CVE-2021-43784: Fixed a potential vulnerability related to the internal usage
  of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436)
* Fixed inability to start a container with read-write bind mount of a read-only fuse host mount.
* Fixed inability to start when read-only /dev in set in spec.
* Fixed not removing sub-cgroups upon container delete, when rootless cgroup
  v2 is used with older systemd.
* Fixed returning error from GetStats when hugetlb is unsupported (which
  causes excessive logging for kubernetes).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.22070

Places