VDB
GO-2022-0452
GO-2022-0452
PUBLISHED
Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | podman | 0 |
| chainguard | podman | 0 |
| github.com | opencontainers/runc | 0 |
| wolfi | ctop | 0 |
| chainguard | runc | * |
| wolfi | runc | * |
| chainguard | ctop | 0 |
Timeline
- Aug 21, 2024 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVPZBV7ISA7QKRPTC7ZXWKMIQI2HZEBB url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D77CKD3AXPMU4PMQIQI5Q74SI4JATNND url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPQU4YC4AAY54JDXGDQHJEYKSXXG5T2Y url
- https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html advisory
- https://github.com/opencontainers/runc/commit/d04de3a9b72d7a2455c1885fc75eb36d02cd17b5 fix
- https://github.com/opencontainers/runc/releases/tag/v1.1.2 fix