[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2023-12578 -- Oracle udica_aardvark-dns_buildah_cockpit-podman_conmon_container-selinux_containernetworking-plugins_containers-common-1_crit_criu_crun_fuse-overlayfs_libslirp_netavark_oci-seccomp-bpf-hook_podman_python3-criu_python3-podman_runc_skopeo_slirp4netns

ID: oval:org.secpod.oval:def:1506790Date: (C)2023-07-25   (M)2024-02-19
Class: PATCHFamily: unix




runc [1:1.1.4-1.0.1] - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589

Platform:
Oracle Linux 8
Product:
udica
aardvark-dns
buildah
cockpit-podman
conmon
container-selinux
containernetworking-plugins
containers-common
crit
criu
crun
fuse-overlayfs
libslirp
netavark
oci-seccomp-bpf-hook
podman
python3-criu
python3-podman
runc
skopeo
slirp4netns
Reference:
ELSA-2023-12578
CVE-2023-28642
CVE-2023-25809
CVE-2023-27561
CVE    3
CVE-2023-25809
CVE-2023-28642
CVE-2023-27561
CPE    19
cpe:/a:oci-seccomp-bpf-hook:oci-seccomp-bpf-hook
cpe:/a:containernetworking:containernetworking-plugins
cpe:/a:freedesktop:libslirp
cpe:/a:libslirp:slirp4netns
...

© SecPod Technologies