CVE-2021-21334 affecting package cri-o for versions less than 1.30.1-1

CVE-2021-21334 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2879 affecting package cri-o for versions less than 1.30.1-1

CVE-2022-2879 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-49569 affecting package cri-o for versions less than 1.30.1-1

CVE-2023-49569 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-49568 affecting package cri-o for versions less than 1.30.1-1

CVE-2023-49568 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-21626 affecting package cri-o for versions less than 1.30.1-1

CVE-2024-21626 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-44487 affecting package cri-o for versions less than 1.30.1-1

CVE-2023-44487 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package cri-o for versions less than 1.30.1-1

CVE-2023-45288 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-47108 affecting package cri-o for versions less than 1.30.1-1

CVE-2023-47108 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-28180 affecting package cri-o for versions less than 1.30.1-1

CVE-2024-28180 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package cri-o for versions less than 1.30.1-1

CVE-2024-24786 affecting package cri-o for versions less than 1.30.1-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2024:12206-1 cri-o-1.24.1-1.1 on GA media

These are all security issues fixed in the cri-o-1.24.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10699-1 cri-o-1.22.0-1.2 on GA media

These are all security issues fixed in the cri-o-1.22.0-1.2 package on the GA media of openSUSE Tumbleweed...

GO-2024-2919 malicious container creates symlink "mtab" on the host External in github.com/cri-o/cri-o

malicious container creates symlink "mtab" on the host External in github.com/cri-o/cri-o...

CVE-2024-3154 affecting package cri-o for versions less than 1.22.3-2

CVE-2024-3154 affecting package cri-o for versions less than 1.22.3-2. A patched version of the package is available...

CVE-2024-21626 affecting package cri-o for versions less than 1.21.7-3

CVE-2024-21626 affecting package cri-o for versions less than 1.21.7-3. A patched version of the package is available...

CVE-2022-4318 affecting package cri-o for versions less than 1.22.3-1

CVE-2022-4318 affecting package cri-o for versions less than 1.22.3-1. A patched version of the package is available...

CVE-2023-45288 affecting package cri-tools for versions less than 1.29.0-2

CVE-2023-45288 affecting package cri-tools for versions less than 1.29.0-2. A patched version of the package is available...

CVE-2023-45142 affecting package cri-tools for versions less than 1.29.0-2

CVE-2023-45142 affecting package cri-tools for versions less than 1.29.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-5154

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal “../“. This flaw allows the container to read and write to arbitrary files on the host system...

CVE-2024-5154

The CVE-2024-5154 entry concerns a vulnerability in the cri-o component used by Red Hat OpenShift/OpenShift Container Platform where a malicious container can traverse directories (../) to read/write arbitrary host files due to improper symbolic link validation. Affected products include CRI-O wi...