Fedora 40 : crun (2025-166f075581)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-166f075581 advisory. Security fix for GHSA-f42g-r5jj-qh4j Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

OPENSUSE-SU-2025:0074-1 Security update for crun

This update for crun fixes the following issues: Update to 1.20: krun: fix CVE-2025-24965. The .krunconfig.json file could be created outside of the container rootfs. bsc1237421 cgroup: reverted the removal of tun/tap from the default allow list, this was done in crun-1.5. The tun/tap device is n...

Security update for crun (moderate)

openSUSE Security Update: Security update for crun Announcement ID: openSUSE-SU-2025:0074-1 Rating: moderate References: 1217590 1218894 1237421 Cross-References: CVE-2024-21626 CVE-2025-24965 CVSS scores: CVE-2024-21626 SUSE: 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2025-24965 SUSE:...

SUSE CVE-2025-24965

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

UBUNTU-CVE-2025-24965

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-24965

CVE-2025-24965 affects crun, an OCI container runtime written in C. A malicious container image could abuse the krun handler to escape the container root filesystem and create or modify files on the host, requiring no special permissions beyond write access to the target file. Affected versions a...

CVE-2025-24965

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

crun 路径遍历漏洞

crun is an OCI Open Container Initiative container runtime library written in C from Containers open source. A path traversal vulnerability exists in versions of crun prior to 1.20, which stems from the fact that a malicious container image could trick a krun handler into escaping the root...

[SECURITY] Fedora 41 Update: crun-1.20-2.fc41

crun is a OCI runtime...

crun-1.20-1.1 on GA media (moderate)

crun-1.20-1.1 on GA media Announcement ID: openSUSE-SU-2025:14763-1 Rating: moderate Cross-References: CVE-2025-24965 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the crun-1.20-1.1 package ...

Fedora 41 : crun (2025-46200d968d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-46200d968d advisory. Security fix for GHSA-f42g-r5jj-qh4j Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

PT-2025-7550 · Crun +1 · Crun +1

Name of the Vulnerable Software and Affected Versions: crun versions prior to 1.20 Description: Crun is an open source OCI Container Runtime fully written in C. In affected versions, a malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation...

OPENSUSE-SU-2025:14763-1 crun-1.20-1.1 on GA media

These are all security issues fixed in the crun-1.20-1.1 package on the GA media of openSUSE Tumbleweed...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-8038)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8038 advisory. aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins...