Stay Secure with the Latest Linux Advisories

security advisorycriticaldirectory traversal

Mageia 8: 2021-0412 Critical: runc Symlink Attack Exploit Fix

runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition (CVE-2021-30465). . MGASA-2021-0412 - Updated opencontainers-runc packages fix security vulnerability Publication date: 27 Aug 2021 URL: https://advisories.mageia.org/MGASA-2021-0412.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-30465 runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition (CVE-2021-30465). References: - https://bugs.mageia.org/show_bug.cgi?id=28962 - https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/35ZW6NBZSBH5PWIT7JU4HXOXGFVDCOHH/ - https://www.cve.org/CVERecord?id=CVE-2021-30465 SRPMS: - 8/core/opencontainers-runc-1.0.2-1.mga8 . Mageia 2021-0413 recommends upgrading the podman package due to a security flaw that could lead to unauthorized access to files.. Opencontainers-runc Security,Mageia Container Issue,Filesystem Breakout Fix. . Severity: Important. LinuxSecurity.com Team

Aug 27, 2021 •Important Mageia