Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Mageia 8: MGASA-2022-0141 Moderate: Crun Improper Capabilities Issue

mageia
Calendar Grey April 15, 2022
Dist Mageia Esm H88
MGASA-2022-0142 tackles an important vulnerability in libcurl related to HTTP/2 handling, implementing necessary patches.
Containers were started incorrectly with non-empty inheritable Linux process capabilities

Summary

Containers were started incorrectly with non-empty inheritable Linux process capabilities. (CVE-2022-27650)

References

- https://bugs.mageia.org/show_bug.cgi?id=30267

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HYIGABCZ7ZHAG2XCOGITTQRJU2ASWMFA/

- https://www.cve.org/CVERecord?id=CVE-2022-27650

Topics%20covered

Topics Covered

security advisory moderate severity container security mageia process capabilities

Resolution

SRPMS

- 8/core/crun-1.4.4-1.mga8

Publication date: 15 Apr 2022
URL: https://advisories.mageia.org/MGASA-2022-0141.html
Type: security
CVE: CVE-2022-27650

Topics%20covered

Topics Covered

security advisory moderate severity container security mageia process capabilities

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.