{"id":"CVE-2023-28642","aliases":["ALPINE-CVE-2023-28642","ALSA-2023:6380","ALSA-2023:6938","ALSA-2023:6939","AZL-25850","BELL-CVE-2023-28642","CLSA-2025-1763648873","DEBIAN-CVE-2023-28642","DLA-3369-1","EUVD-2023-1007","GHSA-g2j6-57v7-gm8c","GO-2023-1683","MGASA-2023-0125","OESA-2023-1204","OESA-2023-1217","OESA-2023-1218","OESA-2023-1383","RHSA-2023:6380","RHSA-2023:6938","RHSA-2023:6939","RHSA-2024:0564","RLSA-2023:6938","RLSA-2023:6939","SUSE-SU-2023:1726-1","SUSE-SU-2023:2003-1","UBUNTU-CVE-2023-28642","USN-6088-1","USN-6088-2","openSUSE-SU-2024:12826-1","openSUSE-SU-2025:15424-1"],"status":"published","title":"AppArmor bypass with symlinked /proc in runc","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00343,"percentile":0.2803,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-281","CWE-59"],"published":"2023-03-27T00:00:00Z","modified":"2026-11-03T06:32:42Z","fixes":[{"ecosystem":"Go","package":"github.com/opencontainers/runc","fixed_in":["1.1.5"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.17","package":"runc","fixed_in":["1.1.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"runc","fixed_in":["1.1.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"moby-runc","fixed_in":["1.1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"runc","fixed_in":["1.1.5+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"runc","fixed_in":["1.1.5+ds1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"runc","fixed_in":["1.1.5+ds1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"runc","fixed_in":["docker-1.0.0.rc3-212.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"runc","fixed_in":["docker-1.0.0.rc3-212.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"runc","fixed_in":["docker-1.0.0.rc3-310.oe2203"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"runc","fixed_in":["1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"runc","fixed_in":["1.1.4-0ubuntu1~18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"runc","fixed_in":["1.1.4-0ubuntu1~20.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"runc","fixed_in":["1.1.4-0ubuntu1~22.04.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/opencontainers/runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.9-1.el9"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"46-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.module_el8.8.0+3468+16b86c82"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-4.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module_el8.9.0+3657+d86e192f"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"75-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.221.0-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-54.module_el8.9.0+3673+0c64b403"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.8.0+3615+3543c705"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.8.0+3615+3543c705"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-20.module_el8.8.0+3615+3543c705"}]}],"bundled":18},{"source":"osv","ecosystem":"Azure Linux:2","package":"moby-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.2.8-1.el9_1.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5+ds1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc6+dfsg1-3+deb10u2"}]}],"versions":["1.0.0~rc6+dfsg1-3","1.0.0~rc6+dfsg1-3+deb10u1"],"bundled":6},{"source":"osv","ecosystem":"Go","package":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.5"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.5"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"opencontainers-runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"docker-1.1.3-13.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"docker-1.0.0.rc3-212.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"docker-1.0.0.rc3-212.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"docker-1.0.0.rc3-310.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-4.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.221.0-1.module+el8.9.0+19685+019f3589"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module+el8.9.0+19649+5879504a"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module+el8.9.0+19649+5879504a"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module+el8.9.0+19649+5879504a"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-54.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-1.module+el8.9.0+19513+83322573"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-1.module+el8.9.0+19513+83322573"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.167.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.167.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.9-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:29-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.26-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.167.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-13.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.2-8.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.4-1.module+el8.4.0+21078+a96cfbf6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-4.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 12","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-16.29.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP4","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-150000.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm4"}]}],"versions":["0.0.8+dfsg-2","0.1.1-0ubuntu5~16.04","1.0.0~rc1-0ubuntu1~16.04","1.0.0~rc1-0ubuntu2~16.04.1","1.0.0~rc1-0ubuntu2~16.04.1.1","1.0.0~rc2-0ubuntu2~16.04.1","1.0.0~rc2+docker1.12.6-0ubuntu1~16.04.1","1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1","1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.2","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.3","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm1","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-0ubuntu1~18.04.2"}]}],"versions":["1.0.0~rc2+docker1.13.1-0ubuntu1","1.0.0~rc4+dfsg1-2","1.0.0~rc4+dfsg1-6","1.0.0~rc4+dfsg1-6ubuntu0.18.04.1","1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1","1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2","1.0.0~rc10-0ubuntu1~18.04.1","1.0.0~rc10-0ubuntu1~18.04.2","1.0.0~rc93-0ubuntu1~18.04.1","1.0.0~rc93-0ubuntu1~18.04.2","1.0.0~rc95-0ubuntu1~18.04.1","1.0.0~rc95-0ubuntu1~18.04.2","1.0.1-0ubuntu2~18.04.1","1.1.0-0ubuntu1~18.04.1","1.1.4-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-0ubuntu1~20.04.3"}]}],"versions":["1.0.0~rc8+git20190923.3e425f80-0ubuntu1","1.0.0~rc10-0ubuntu1","1.0.0~rc93-0ubuntu1~20.04.1","1.0.0~rc93-0ubuntu1~20.04.2","1.0.0~rc95-0ubuntu1~20.04.1","1.0.0~rc95-0ubuntu1~20.04.2","1.0.1-0ubuntu2~20.04.1","1.1.0-0ubuntu1~20.04.1","1.1.0-0ubuntu1~20.04.2","1.1.4-0ubuntu1~20.04.1","1.1.4-0ubuntu1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-0ubuntu1~22.04.3"}]}],"versions":["1.0.1-0ubuntu2","1.0.1-0ubuntu3","1.0.3-0ubuntu1","1.1.0-0ubuntu1","1.1.0-0ubuntu1.1","1.1.4-0ubuntu1~22.04.1","1.1.4-0ubuntu1~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-0ubuntu1~18.04.2"}]}],"versions":["1.0.0~rc2+docker1.13.1-0ubuntu1","1.0.0~rc4+dfsg1-2","1.0.0~rc4+dfsg1-6","1.0.0~rc4+dfsg1-6ubuntu0.18.04.1","1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1","1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2","1.0.0~rc10-0ubuntu1~18.04.1","1.0.0~rc10-0ubuntu1~18.04.2","1.0.0~rc93-0ubuntu1~18.04.1","1.0.0~rc93-0ubuntu1~18.04.2","1.0.0~rc95-0ubuntu1~18.04.1","1.0.0~rc95-0ubuntu1~18.04.2","1.0.1-0ubuntu2~18.04.1","1.1.0-0ubuntu1~18.04.1","1.1.4-0ubuntu1~18.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-0ubuntu1~20.04.3"}]}],"versions":["1.0.0~rc8+git20190923.3e425f80-0ubuntu1","1.0.0~rc10-0ubuntu1","1.0.0~rc93-0ubuntu1~20.04.1","1.0.0~rc93-0ubuntu1~20.04.2","1.0.0~rc95-0ubuntu1~20.04.1","1.0.0~rc95-0ubuntu1~20.04.2","1.0.1-0ubuntu2~20.04.1","1.1.0-0ubuntu1~20.04.1","1.1.0-0ubuntu1~20.04.2","1.1.4-0ubuntu1~20.04.1","1.1.4-0ubuntu1~20.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-0ubuntu1~22.04.3"}]}],"versions":["1.0.1-0ubuntu2","1.0.1-0ubuntu3","1.0.3-0ubuntu1","1.1.0-0ubuntu1","1.1.0-0ubuntu1.1","1.1.4-0ubuntu1~22.04.1","1.1.4-0ubuntu1~22.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm4"}]}],"versions":["0.0.8+dfsg-2","0.1.1-0ubuntu5~16.04","1.0.0~rc1-0ubuntu1~16.04","1.0.0~rc1-0ubuntu2~16.04.1","1.0.0~rc1-0ubuntu2~16.04.1.1","1.0.0~rc2-0ubuntu2~16.04.1","1.0.0~rc2+docker1.12.6-0ubuntu1~16.04.1","1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1","1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.2","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.3","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm1","1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4+esm2"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250807T150727-1.1"}]}],"bundled":44}],"products":[{"vendor":"linuxfoundation","product":"runc"},{"vendor":"opencontainers","product":"runc"}],"references":[{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","web","report"]},{"url":"https://github.com/opencontainers/runc/pull/3785","tags":["x_refsource_MISC","x_transferred","Patch","fix","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20241206-0005/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28642","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241206-0005","tags":["web"]},{"url":"https://github.com/advisories/GHSA-g2j6-57v7-gm8c","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-28642","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6380","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43784","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41724","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25809","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27561","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28642","tags":["report"]},{"url":"https://bugzilla.redhat.com/2029439","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175721","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178492","tags":["report"]},{"url":"https://bugzilla.redhat.com/2182883","tags":["report"]},{"url":"https://bugzilla.redhat.com/2182884","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6380.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6938","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3064","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41723","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41725","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24534","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24536","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24537","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24538","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24539","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24540","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29400","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29406","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3978","tags":["report"]},{"url":"https://bugzilla.redhat.com/2163037","tags":["report"]},{"url":"https://bugzilla.redhat.com/2165743","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178358","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178488","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184481","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184482","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184484","tags":["report"]},{"url":"https://bugzilla.redhat.com/2196026","tags":["report"]},{"url":"https://bugzilla.redhat.com/2196027","tags":["report"]},{"url":"https://bugzilla.redhat.com/2196029","tags":["report"]},{"url":"https://bugzilla.redhat.com/2222167","tags":["report"]},{"url":"https://bugzilla.redhat.com/2228689","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231464","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6938.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6939","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25173","tags":["report"]},{"url":"https://bugzilla.redhat.com/2174485","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6939.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-28642","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763648873.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28642.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-28642","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2023-0125.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31729","tags":["report"]},{"url":"https://www.debian.org/lts/security/2023/dla-3369","tags":["web"]},{"url":"https://github.com/opencontainers/runc/issues/3789","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25809","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1217","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1218","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1383","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182884","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6380.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43784","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41724","tags":["advisory"]},{"url":"https://go.dev/cl/468125","tags":["article"]},{"url":"https://go.dev/issue/58001","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1570","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25809","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/commit/0d62b950e60f6980b54fe3bafd9a9c608dc1df17","tags":["article"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27561","tags":["advisory"]},{"url":"https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9","tags":["article"]},{"url":"https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334","tags":["article"]},{"url":"https://github.com/opencontainers/runc/issues/3751","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28642","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231464","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6938.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3064","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6q6q-88xp-6f2r","tags":["advisory"]},{"url":"https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5","tags":["article"]},{"url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-0956","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41723","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vvpx-j8f3-3w6h","tags":["advisory"]},{"url":"https://go.dev/cl/468135","tags":["article"]},{"url":"https://go.dev/cl/468295","tags":["article"]},{"url":"https://go.dev/issue/57855","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1571","tags":["advisory"]},{"url":"https://vuln.go.dev/ID/GO-2023-1571.json","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41725","tags":["advisory"]},{"url":"https://go.dev/cl/468124","tags":["article"]},{"url":"https://go.dev/issue/58006","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1569","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3978","tags":["advisory"]},{"url":"https://go.dev/cl/514896","tags":["article"]},{"url":"https://go.dev/issue/61615","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1988","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24534","tags":["advisory"]},{"url":"https://go.dev/issue/58975","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24536","tags":["advisory"]},{"url":"https://go.dev/issue/59153","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24537","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/59180","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24538","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/59234","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24539","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/59720","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24540","tags":["advisory"]},{"url":"https://go.dev/issue/59721","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29400","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29400","tags":["advisory"]},{"url":"https://go.dev/issue/59722","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29406","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/2q13H6LEEx0","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233218","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-3126","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3149","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6939.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25173","tags":["advisory"]},{"url":"https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a","tags":["article"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.5.18","tags":["article"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.6.18","tags":["article"]},{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p","tags":["article"]},{"url":"https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0564","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045880","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-17147","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0564.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21698","tags":["advisory"]},{"url":"https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6938","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6939","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231726-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1168481","tags":["report"]},{"url":"https://bugzilla.suse.com/1208962","tags":["report"]},{"url":"https://bugzilla.suse.com/1209884","tags":["report"]},{"url":"https://bugzilla.suse.com/1209888","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28642","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232003-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-28642","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6088-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6088-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-25809","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-27561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-43784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29162","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1002102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1002100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1002101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1002100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1002101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47908","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-28642","title":"AppArmor bypass with symlinked /proc in runc","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n","status":"published","published":"2023-03-29T18:15:48.957Z","modified":"2025-02-12T16:02:53.406Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-1007","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n","status":"published","published":"2023-03-29T18:15:48Z","modified":"2025-02-12T16:02:53Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:03:58.326443Z"}],"ghsa":[{"id":"GHSA-g2j6-57v7-gm8c","title":"runc AppArmor bypass with symlinked /proc","description":"### Impact\nIt was found that AppArmor, and potentially SELinux, can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration.\n\n### Patches\nFixed in runc v1.1.5, by prohibiting symlinked `/proc`: https://github.com/opencontainers/runc/pull/3785\n\nThis PR fixes CVE-2023-27561 as well.\n\n### Workarounds\nAvoid using an untrusted container image.\n\n","status":"published","published":"2023-03-30T20:20:23Z","modified":"2024-12-06T15:32:22Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-59","CWE-281"],"updated_at":"2026-11-02T14:38:24.542211Z"}],"nvd":[{"id":"CVE-2023-28642","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n","status":"published","published":"2023-03-29T19:15:22.397Z","modified":"2026-06-17T05:48:27.157Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-281","CWE-59"],"updated_at":"2026-11-02T14:07:51.883939Z"}],"osv":[{"id":"ALPINE-CVE-2023-28642","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n","status":"published","published":"2023-03-29T19:15:22.397Z","modified":"2026-11-03T06:32:42.565868011Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-25850","title":"CVE-2023-28642 affecting package moby-runc for versions less than 1.1.5-1","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n","status":"published","published":"2023-03-29T19:15:22Z","modified":"2026-04-21T04:23:19.097088Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-28642","title":"CVE-2023-28642 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:08.935145Z","modified":"2026-01-26T09:47:41.103921Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-28642","title":"AppArmor bypass with symlinked /proc in runc","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.\n\n","status":"published","published":"2023-03-29T18:15:48.957Z","modified":"2026-10-28T02:30:38.695106362Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-28642","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.","status":"published","published":"2023-03-29T19:15:22.397Z","modified":"2026-10-26T18:00:49.285102955Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"GHSA-g2j6-57v7-gm8c","title":"runc AppArmor bypass with symlinked /proc","description":"### Impact\nIt was found that AppArmor, and potentially SELinux, can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration.\n\n### Patches\nFixed in runc v1.1.5, by prohibiting symlinked `/proc`: https://github.com/opencontainers/runc/pull/3785\n\nThis PR fixes CVE-2023-27561 as well.\n\n### Workarounds\nAvoid using an untrusted container image.\n\n","status":"published","published":"2023-03-30T20:20:23Z","modified":"2026-09-10T03:50:08.149376848Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-281","CWE-59"],"updated_at":"2026-11-02T15:46:47.119724Z"},{"id":"OESA-2023-1204","title":"runc security update","description":"runc is a CLI tool for spawning and running containers according to the OCI specification.\r\n\r\nSecurity Fix(es):\r\n\r\nrunc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the `config.json` does not specify the cgroup namespace to be unshared (e.g.., `(docker|podman|nerdctl) run --cgroupns=host`, with Rootless Docker/Podman/nerdctl) or 2. when runc is executed outside the user namespace, and `/sys` is mounted with `rbind, ro` (e.g., `runc spec --rootless`; this condition is very rare). A container may gain the write access to user-owned cgroup hierarchy `/sys/fs/cgroup/user.slice/...` on the host . Other users\u0026apos;s cgroup hierarchies are not affected. Users are advised to upgrade to version 1.1.5. Users unable to upgrade may unshare the cgroup namespace (`(docker|podman|nerdctl) run --cgroupns=private)`. This is the default behavior of Docker/Podman/nerdctl on cgroup v2 hosts. or add `/sys/fs/cgroup` to `maskedPaths`.(CVE-2023-25809)\r\n\r\nrunc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.(CVE-2023-28642)","status":"published","published":"2023-04-11T11:05:40Z","modified":"2026-08-18T01:17:38.884490249Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1217","title":"runc security update","description":"runc is a CLI tool for spawning and running containers according to the OCI specification.\r\n\r\nSecurity Fix(es):\r\n\r\nrunc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.(CVE-2023-28642)","status":"published","published":"2023-04-14T11:05:41Z","modified":"2026-08-18T01:17:39.63019526Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1218","title":"runc security update","description":"runc is a CLI tool for spawning and running containers according to the OCI specification.\r\n\r\nSecurity Fix(es):\r\n\r\nrunc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.(CVE-2023-28642)","status":"published","published":"2023-04-14T11:05:41Z","modified":"2026-08-18T01:17:39.425802378Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1383","title":"runc security update","description":"runc is a CLI tool for spawning and running containers according to the OCI specification.\r\n\r\nSecurity Fix(es):\r\n\r\nrunc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.(CVE-2023-28642)","status":"published","published":"2023-07-01T11:05:51Z","modified":"2026-08-18T01:16:58.770153534Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:6380","title":"Red Hat Security Advisory: runc security update","status":"published","published":"2024-09-30T14:58:06Z","modified":"2026-10-16T10:02:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6938","title":"Red Hat Security Advisory: container-tools:4.0 security and bug fix update","status":"published","published":"2024-10-21T18:35:42Z","modified":"2026-10-20T10:02:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6939","title":"Red Hat Security Advisory: container-tools:rhel8 security and bug fix update","status":"published","published":"2024-10-21T18:35:29Z","modified":"2026-10-20T10:02:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:0564","title":"Red Hat Security Advisory: container-tools:3.0 security update","status":"published","published":"2024-10-21T18:41:13Z","modified":"2026-10-17T10:02:50Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2023:6938","title":"Moderate: container-tools:4.0 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:49.110886Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:6939","title":"Moderate: container-tools:rhel8 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n\n* containerd: Supplementary groups are not set up properly (CVE-2023-25173)\n\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:49.584987Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-28642","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.","status":"published","published":"2023-03-29T19:15:00Z","modified":"2026-02-04T03:07:53.977451Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:6380","title":"Moderate: runc security update","description":"The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.\n\nSecurity Fix(es):\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n* runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration (CVE-2021-43784)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:32.183912903Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6938","title":"Moderate: container-tools:4.0 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:20.013744235Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6939","title":"Moderate: container-tools:rhel8 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* containerd: Supplementary groups are not set up properly (CVE-2023-25173)\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:20.02956464Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1763648873","title":"runc: Fix of 6 CVEs","description":"- upgrade to runc 1.2.8 to fix multiple critical security vulnerabilities:\n- CVE-2024-21626: fix file descriptor leak vulnerability allowing container\n  escape\n- CVE-2025-52565: fix container escape with malicious config due to /dev/console\n  mount races\n- CVE-2025-31133: fix container escape and denial of service due to masked path\n  abuse\n- CVE-2025-52881: fix container escape and denial of service due to procfs\n  write redirects\n- remove obsolete CVE-2023-27561_CVE-2023-28642.patch (fixes included in 1.2.8)\n- add no_openssl build tag to prevent use of vendored crypto libraries\n- add runc_dmz_selinux_nocompat build tag for SELinux DMZ feature support\n- add container-selinux \u003e= 2.224.0 dependency for DMZ SELinux feature","status":"published","published":"2025-11-20T14:27:57Z","modified":"2026-10-21T10:45:40.847799335Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-3369-1","title":"runc - security update","status":"published","published":"2023-03-27T00:00:00Z","modified":"2026-03-09T01:18:39.384079Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"GO-2023-1683","title":"AppArmor bypass with symlinked /proc in github.com/opencontainers/runc","description":"AppArmor bypass with symlinked /proc in github.com/opencontainers/runc","status":"published","published":"2024-08-20T20:29:17Z","modified":"2026-02-04T04:01:58.343687Z","updated_at":"2026-11-02T15:47:01.185262Z"},{"id":"MGASA-2023-0125","title":"Updated opencontainers-runc packages fix security vulnerability","description":"/sys/fs/cgroup is writable when cgroupns isn't unshared (CVE-2023-25809)\nRegression that reintroduced CVE-2019-19921 -  Incorrect Access Control\nleading to Escalation of Privileges (CVE-2023-27561)\nAppArmor/SELinux bypass with symlinked /proc (CVE-2023-28642)\n","status":"published","published":"2023-04-06T21:20:12Z","modified":"2026-04-16T04:44:05.187725954Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12826-1","title":"runc-1.1.5-1.1 on GA media","description":"These are all security issues fixed in the runc-1.1.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:17:40.132586Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2025:15424-1","title":"govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-08T00:00:00Z","modified":"2026-03-23T04:53:45.821911Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2023:1726-1","title":"Security update for runc","description":"This update for runc fixes the following issues:\n\nUpdate to runc v1.1.5:\n\nSecurity fixes:\n\n- CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884).\n- CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962).\n- CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888).\n\nOther fixes:\n\n - Fix the inability to use `/dev/null` when inside a container.\n - Fix changing the ownership of host's `/dev/null` caused by fd redirection (bsc#1168481).\n - Fix rare runc exec/enter unshare error on older kernels.\n - nsexec: Check for errors in `write_log()`.\n - Drop version-specific Go requirement.\n","status":"published","published":"2023-04-03T08:24:06Z","modified":"2026-02-04T03:27:10.954718Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2003-1","title":"Security update for runc","description":"This update for runc fixes the following issues:\n\nUpdate to runc v1.1.5:\n\nSecurity fixes:\n\n- CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884).\n- CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962).\n- CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888).\n\nOther fixes:\n\n - Fix the inability to use `/dev/null` when inside a container.\n - Fix changing the ownership of host's `/dev/null` caused by fd redirection (bsc#1168481).\n - Fix rare runc exec/enter unshare error on older kernels.\n - nsexec: Check for errors in `write_log()`.\n - Drop version-specific Go requirement.\n","status":"published","published":"2023-04-25T16:06:00Z","modified":"2026-02-04T04:39:14.524926Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-6088-1","title":"runc vulnerabilities","description":"It was discovered that runC incorrectly made /sys/fs/cgroup\nwritable when in rootless mode. An attacker could possibly\nuse this issue to escalate privileges. (CVE-2023-25809)\n\nIt was discovered that runC incorrectly performed access control when\nmounting /proc to non-directories. An attacker could possibly use\nthis issue to escalate privileges. (CVE-2023-27561)\n\nIt was discovered that runC incorrectly handled /proc and \n/sys mounts inside a container. An attacker could possibly\nuse this issue to bypass AppArmor, and potentially SELinux.\n(CVE-2023-28642)\n","status":"published","published":"2023-05-18T10:03:59Z","modified":"2026-02-10T04:43:08Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6088-2","title":"runc vulnerabilities","description":"USN-6088-1 fixed vulnerabilities in runC. This update provides\nthe corresponding updates for Ubuntu 16.04 LTS.\n\nIt was discovered that runC incorrectly performed access control when\nmounting /proc to non-directories. An attacker could possibly use\nthis issue to escalate privileges.\n(CVE-2019-19921)\n\nFelix Wilhelm discovered that runC incorrecly handled netlink \nmessages. An attacker could possibly use\nthis issue to escalate privileges. (CVE-2021-43784)\n\nAndrew G. Morgan discovered that runC incorrectly set\ninherited process capabilities inside the container.\nAn attacker could possibly use this issue to\nescalate privileges. (CVE-2022-29162)\n\nOriginal advisory details:\n\n It was discovered that runC incorrectly made /sys/fs/cgroup\n writable when in rootless mode. An attacker could possibly\n use this issue to escalate privileges. (CVE-2023-25809)\n \n It was discovered that runC incorrectly performed access control when\n mounting /proc to non-directories. An attacker could possibly use\n this issue to escalate privileges. (CVE-2023-27561)\n \n It was discovered that runC incorrectly handled /proc and \n /sys mounts inside a container. An attacker could possibly\n use this issue to bypass AppArmor, and potentially SELinux.\n (CVE-2023-28642)\n","status":"published","published":"2023-05-23T14:07:29Z","modified":"2026-06-25T13:32:04.23949437Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}