Permissions, Privileges, and Access Controls in runc - CVE-2022-29162

Vulnerability identifier: #VU63090

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-29162

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to containers are incorrectly started with non-empty inheritable Linux process capabilities, which leads to security restrictions bypass and privilege escalation.

runc
Oracle Linux
Amazon Linux AMI
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Containers
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
openSUSE Leap
Ubuntu
openEuler
Fedora
Storage
IBM Concert Software
IBM MQ Operator
IBM Cloud Transformation Advisor
QRadar Suite
Storage Defender - Resiliency Service
DB2 Data Management Console
DB2 Data Management Console on CPD
PowerStore X
PowerStore T
IBM Cloud Pak for Watson AIOps
DB2 on Cloud Pak for Data
IBM Edge Application Manager
Dell EMC Container Storage Modules
Red Hat OpenShift Container Platform
SUSE Linux Enterprise Module for Packagehub Subpackages
runc (Ubuntu package)
toolbox (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
rust-bootupd (Red Hat package)
python-oslo-metrics (Red Hat package)
python-logutils (Red Hat package)
python-colorama (Red Hat package)
python-greenlet (Red Hat package)
python-zipp (Red Hat package)
python-tempita (Red Hat package)
python-msgpack (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-scciclient (Red Hat package)
python-voluptuous (Red Hat package)
python-migrate (Red Hat package)
python-fasteners (Red Hat package)
butane (Red Hat package)
coreos-installer (Red Hat package)
python-pyrsistent (Red Hat package)
console-login-helper-messages (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
kubevirt-tests-debuginfo
obs-service-kubevirt_containers_meta
kubevirt-virtctl-debuginfo
kubevirt-virtctl
kubevirt-virt-operator-debuginfo
kubevirt-virt-launcher-debuginfo
kubevirt-virt-launcher
kubevirt-virt-handler-debuginfo
kubevirt-virt-handler
kubevirt-virt-controller-debuginfo
kubevirt-virt-controller
kubevirt-virt-api-debuginfo
kubevirt-virt-api
kubevirt-virt-operator
kubevirt-tests
kubevirt-manifests
kubevirt-container-disk-debuginfo
kubevirt-container-disk
python-openstacksdk (Red Hat package)
docker-runc
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-yappi (Red Hat package)
python-editor (Red Hat package)
libsodium (Red Hat package)
python-flask (Red Hat package)
golang-github-opencontainers-runc
runc (Red Hat package)
python-dogpile-cache (Red Hat package)
runc
runc-debuginfo
slirp4netns (Red Hat package)
app-containers/runc
python-rfc3986 (Red Hat package)
python-retrying (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-vine (Red Hat package)
python-pynacl (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-appdirs (Red Hat package)
crun (Red Hat package)
python-alembic (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
skopeo (Red Hat package)
python-pyperclip (Red Hat package)
containerd
containerd-ctr
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
python-webob (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
python-six (Red Hat package)
containers-common (Red Hat package)
buildah (Red Hat package)
cri-o (Red Hat package)
cri-tools (Red Hat package)
python-memcached (Red Hat package)
python-waitress (Red Hat package)
python-paste-deploy (Red Hat package)
python-werkzeug (Red Hat package)
python-webtest (Red Hat package)
python-soupsieve (Red Hat package)
conmon (Red Hat package)
haproxy (Red Hat package)
pyparsing (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
kata-containers (Red Hat package)
python-automaton (Red Hat package)
python-debtcollector (Red Hat package)
python-osc-lib (Red Hat package)
python-amqp (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
python-os-traits (Red Hat package)
python-kazoo (Red Hat package)
python-oslo-service (Red Hat package)
python-oslo-cache (Red Hat package)
python-construct (Red Hat package)
python-tooz (Red Hat package)
python-proliantutils (Red Hat package)
ignition (Red Hat package)
openvswitch2.17 (Red Hat package)
container-selinux (Red Hat package)
python-cachetools (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-stevedore (Red Hat package)
python-glanceclient (Red Hat package)
python-cliff (Red Hat package)
python-oslo-policy (Red Hat package)
python-swiftclient (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
podman (Red Hat package)
python-oslo-context (Red Hat package)
python-sushy (Red Hat package)
python-oslo-serialization (Red Hat package)
python-keystoneclient (Red Hat package)
libslirp (Red Hat package)
python-decorator (Red Hat package)
pysnmp (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-oslo-middleware (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-kombu (Red Hat package)
python-beautifulsoup4 (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-ansible (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
python-oslo-utils (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python-pbr (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-dracclient (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
openstack-ironic (Red Hat package)
python-packaging (Red Hat package)
docker-debuginfo
docker
docker-zsh-completion
docker-kubic-zsh-completion
docker-kubic-fish-completion
docker-kubic-bash-completion
docker-fish-completion
docker-bash-completion
docker-kubic-kubeadm-criconfig
docker-kubic-debuginfo
docker-kubic
python-keyring (Red Hat package)
ovn22.03 (Red Hat package)
ovn22.06 (Red Hat package)
Cloud Pak for Data
Dell EMC VxRail Appliance

Install updates from vendor's website.

runc - update to 1.1.2
Storage - update to 1.42.0
QRadar Suite - update to 1.10.21.0
Storage Defender - Resiliency Service - update to 2.0.11
DB2 Data Management Console - update to 3.1.13.1
DB2 Data Management Console on CPD - update to 4.7.2
runc (Ubuntu package) - update to Ubuntu Pro
toolbox (Red Hat package) - update to 0.0.9-1.rhaos4.11.el8
python-ifaddr (Red Hat package) - update to 0.1.6-6.el8
python-wcwidth (Red Hat package) - update to 0.1.7-15.el8
python-iso8601 (Red Hat package) - update to 0.1.12-9.el8
python-zake (Red Hat package) - update to 0.2.2-19.el8
python-sqlparse (Red Hat package) - update to 0.2.4-10.el8
rust-bootupd (Red Hat package) - update to 0.2.5-3.rhaos4.11.el8
python-oslo-metrics (Red Hat package) - update to 0.3.0-0.20220216012738.43eee50.el8
python-logutils (Red Hat package) - update to 0.3.5-7.1.el8
python-colorama (Red Hat package) - update to 0.4.1-2.el8
python-greenlet (Red Hat package) - update to 0.4.14-6.el8
python-zipp (Red Hat package) - update to 0.5.1-3.el8
python-tempita (Red Hat package) - update to 0.5.1-25.el8
python-msgpack (Red Hat package) - update to 0.6.2-2.el8
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el8
python-repoze-lru (Red Hat package) - update to 0.7-7.el8
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el8
python-dataclasses (Red Hat package) - update to 0.8-3.el8
python-pint (Red Hat package) - update to 0.10.1-3.el8
python-wsme (Red Hat package) - update to 0.11.0-0.20220216004816.80bda90.el8
python-scciclient (Red Hat package) - update to 0.11.1-0.20220216020832.a84332b.el8
python-voluptuous (Red Hat package) - update to 0.11.7-3.el8
python-migrate (Red Hat package) - update to 0.13.0-2.el8
python-fasteners (Red Hat package) - update to 0.14.1-21.el8
butane (Red Hat package) - update to 0.15.0-1.rhaos4.11.el8
coreos-installer (Red Hat package) - update to 0.15.0-2.rhaos4.11.el8
python-pyrsistent (Red Hat package) - update to 0.16.0-4.el8
console-login-helper-messages (Red Hat package) - update to 0.20.3-2.rhaos4.11.el8
python-zeroconf (Red Hat package) - update to 0.24.4-2.el8
python-hardware (Red Hat package) - update to 0.29.0-0.20220216015636.7662a1d.el8
kubevirt-tests-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
obs-service-kubevirt_containers_meta - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virtctl-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virtctl - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-operator-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-launcher-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-launcher - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-handler-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-handler - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-controller-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-controller - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-api-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-api - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-virt-operator - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-tests - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-manifests - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-container-disk-debuginfo - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
kubevirt-container-disk - addressed in versions 0.49.0-150300.8.13.1, 0.54.0-150400.3.3.2
python-openstacksdk (Red Hat package) - update to 0.61.0-0.20220509201549.26c9bc2.el8
docker-runc - update to 1.0.0 rc3-203
IBM Concert Software - update to 1.0.1
containernetworking-plugins (Red Hat package) - update to 1.0.1-5.rhaos4.11.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el8
python-yappi (Red Hat package) - update to 1.0-3.el8
python-editor (Red Hat package) - update to 1.0.4-5.el8
libsodium (Red Hat package) - update to 1.0.16-5.el8
python-flask (Red Hat package) - update to 1.1.1-2.el8
golang-github-opencontainers-runc - addressed in versions 1.1.2-1.fc34, 1.1.2-1.fc35, 1.1.2-1.fc36
runc (Red Hat package) - addressed in versions 1.1.2-1.rhaos4.11.el8, 1.1.4-1.el9
python-dogpile-cache (Red Hat package) - update to 1.1.2-2.el8
runc - addressed in versions 1.1.3-1, 1.1.7-1
runc - addressed in versions 1.1.3-16.21.1, 1.1.3-150000.30.1
runc-debuginfo - addressed in versions 1.1.3-16.21.1, 1.1.3-150000.30.1
slirp4netns (Red Hat package) - update to 1.1.8-1.rhaos4.11.el8
app-containers/runc - update to 1.1.12
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el8
python-retrying (Red Hat package) - update to 1.2.3-22.el8
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el8
python-vine (Red Hat package) - update to 1.3.0-5.el8
python-pynacl (Red Hat package) - update to 1.3.0-6.el8
python-pecan (Red Hat package) - update to 1.3.2-10.el8
python-warlock (Red Hat package) - update to 1.3.3-2.el8
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20220215231659.d7ac0ff.el8
python-appdirs (Red Hat package) - update to 1.4.0-8.el8
crun (Red Hat package) - update to 1.4.2-1.rhaos4.11.el8
python-alembic (Red Hat package) - update to 1.4.2-6.el8
python-oslo-upgradecheck (Red Hat package) - update to 1.5.0-0.20220509195112.1559e03.el8
skopeo (Red Hat package) - update to 1.5.2-3.rhaos4.11.el8
python-pyperclip (Red Hat package) - update to 1.6.4-7.el8
containerd - addressed in versions 1.6.6-16.62.1, 1.6.6-150000.73.2
containerd-ctr - update to 1.6.6-150000.73.2
Dell EMC Container Storage Modules - update to 1.7.0
python-os-service-types (Red Hat package) - update to 1.7.0-0.20220215231659.0b2f473.el8
python-importlib-metadata (Red Hat package) - update to 1.7.0-2.el8
python-webob (Red Hat package) - update to 1.8.5-5.el8
fuse-overlayfs (Red Hat package) - update to 1.9-1.rhaos4.11.el8
python-pycdlib (Red Hat package) - update to 1.11.0-4.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el8
python-six (Red Hat package) - update to 1.15.0-3.el8
containers-common (Red Hat package) - update to 1-21.rhaos4.11.el8
buildah (Red Hat package) - update to 1.23.4-2.el8
cri-o (Red Hat package) - update to 1.24.1-11.rhaos4.11.gitb0d2ef3.el8
cri-tools (Red Hat package) - update to 1.24.2-4.1.el8
python-memcached (Red Hat package) - update to 1.58-12.el8
python-waitress (Red Hat package) - update to 2.0.0-2.el8
python-paste-deploy (Red Hat package) - update to 2.0.1-5.el8
python-werkzeug (Red Hat package) - update to 2.0.3-1.el8
IBM MQ Operator - addressed in versions 2.0.13, 2.4.1
python-webtest (Red Hat package) - update to 2.0.33-5.el8
python-soupsieve (Red Hat package) - update to 2.1.0-2.el8
conmon (Red Hat package) - update to 2.1.2-2.rhaos4.11.el8
haproxy (Red Hat package) - update to 2.2.24-1.el8
pyparsing (Red Hat package) - update to 2.3.1-2.el8
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el8
python-munch (Red Hat package) - update to 2.3.2-7.el8
python-futurist (Red Hat package) - update to 2.4.1-0.20220509215250.159d752.el8
python-routes (Red Hat package) - update to 2.4.1-12.el8
kata-containers (Red Hat package) - update to 2.4.2-1.el8
python-automaton (Red Hat package) - update to 2.5.0-0.20220509195848.aaca110.el8
python-debtcollector (Red Hat package) - update to 2.5.0-0.20220509211533.a6b46c5.el8
python-osc-lib (Red Hat package) - update to 2.5.0-0.20220509211843.78d276e.el8
python-amqp (Red Hat package) - update to 2.5.2-8.el8
python-oslo-versionedobjects (Red Hat package) - update to 2.6.0-0.20220509202736.25d34d6.el8
python-os-traits (Red Hat package) - update to 2.7.0-0.20220509205801.3d1dbf0.el8
python-kazoo (Red Hat package) - update to 2.7.0-2.el8
python-oslo-service (Red Hat package) - update to 2.8.0-0.20220509203713.6552b9a.el8
python-oslo-cache (Red Hat package) - update to 2.8.1-0.20220216000746.40946a9.el8
python-construct (Red Hat package) - update to 2.10.56-2.el8
python-tooz (Red Hat package) - update to 2.11.1-0.20220509215238.96f91b9.el8
python-proliantutils (Red Hat package) - update to 2.13.2-0.20220509214147.8c7b6b1.el8
ignition (Red Hat package) - update to 2.14.0-3.rhaos4.11.el8
openvswitch2.17 (Red Hat package) - update to 2.17.0-22.el8fdp
container-selinux (Red Hat package) - update to 2.188.0-1.rhaos4.11.el8
python-cachetools (Red Hat package) - update to 3.1.0-3.el8
python-pycadf (Red Hat package) - update to 3.1.1-0.20220215232623.4179996.el8
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20220324125409.db1a824.el8
python-bcrypt (Red Hat package) - update to 3.1.6-3.el8
python-jsonschema (Red Hat package) - update to 3.2.0-6.el8
PowerStore X - update to 3.2.1.0-1989710
PowerStore T - update to 3.2.1.0-1989710
python-statsd (Red Hat package) - update to 3.2.1-17.el8
python-paste (Red Hat package) - update to 3.2.4-2.el8
python-redis (Red Hat package) - update to 3.3.8-2.el8
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el8
python-osprofiler (Red Hat package) - update to 3.4.3-0.20220509214403.3286301.el8
python-stevedore (Red Hat package) - update to 3.5.0-0.20220509195112.442f157.el8
python-glanceclient (Red Hat package) - update to 3.6.0-0.20220509212414.626c500.el8
IBM Cloud Pak for Watson AIOps - update to 3.6.1
IBM Cloud Transformation Advisor - update to 3.10.1
python-cliff (Red Hat package) - update to 3.10.1-0.20220509200732.a04a48f.el8
python-oslo-policy (Red Hat package) - update to 3.12.1-0.20220509221328.9673a74.el8
python-swiftclient (Red Hat package) - update to 3.13.1-0.20220509204112.4989d94.el8
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el8
python-sushy-oem-idrac (Red Hat package) - update to 4.0.0-0.20220324125409.7b75e6e.el8
podman (Red Hat package) - update to 4.0.2-6.rhaos4.11.el8
python-oslo-context (Red Hat package) - update to 4.1.0-0.20220509205437.3400cc2.el8
python-sushy (Red Hat package) - update to 4.1.1-0.20220302175405.c769149.el8
python-oslo-serialization (Red Hat package) - update to 4.3.0-0.20220509195921.6910f75.el8
python-keystoneclient (Red Hat package) - update to 4.4.0-0.20220509200759.100253d.el8
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-decorator (Red Hat package) - update to 4.4.0-6.el8
pysnmp (Red Hat package) - update to 4.4.8-3.el8
python-keystoneauth1 (Red Hat package) - update to 4.5.0-0.20220509213157.8da0a63.el8
python-oslo-middleware (Red Hat package) - update to 4.5.1-0.20220509203328.2f72b30.el8
python-oslo-concurrency (Red Hat package) - update to 4.5.1-0.20220509221157.145f060.el8
python-oslo-log (Red Hat package) - update to 4.6.0-0.20220216002407.41c8807.el8
python-pexpect (Red Hat package) - update to 4.6-3.el8
python-kombu (Red Hat package) - update to 4.6.6-8.el8
DB2 on Cloud Pak for Data - update to 4.8.4
Cloud Pak for Data - update to 4.8.5
python-beautifulsoup4 (Red Hat package) - update to 4.9.3-2.el8
Red Hat OpenShift Container Platform - update to 4.11.0
atomic-openshift-service-idler (Red Hat package) - update to 4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
openshift-kuryr (Red Hat package) - update to 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
openshift-ansible (Red Hat package) - update to 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
openshift (Red Hat package) - update to 4.11.0-202207082037.p0.g9546431.assembly.stream.el8
openshift-clients (Red Hat package) - update to 4.11.0-202207291716.p0.g7075089.assembly.stream.el8
python-oslo-utils (Red Hat package) - update to 4.13.0-0.20220509213520.de4429f.el8
python-oslo-i18n (Red Hat package) - update to 5.1.0-0.20220216011159.b031d17.el8
python-ironic-lib (Red Hat package) - update to 5.1.1-0.20220225151335.e205816.el8
rust-afterburn (Red Hat package) - update to 5.3.0-1.rhaos4.11.el8
python-pbr (Red Hat package) - update to 5.5.1-2.el8
python-tenacity (Red Hat package) - update to 6.2.0-2.el8
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20220509204453.1b1b960.el8
Dell EMC VxRail Appliance - update to 8.0.000
python-dracclient (Red Hat package) - update to 8.0.0-0.20220509201613.9c7499c.el8
python-cinderclient (Red Hat package) - update to 8.3.0-0.20220509212734.ee59b68.el8
openstack-ironic-python-agent (Red Hat package) - update to 8.6.1-0.20220623075054.1d50c23.el8
python-oslo-config (Red Hat package) - update to 8.8.0-0.20220509202553.64c82a0.el8
python-oslo-db (Red Hat package) - update to 9.1.0-0.20220216003829.be2cc6a.el8
python-keystonemiddleware (Red Hat package) - update to 9.4.0-0.20220509211054.8a05709.el8
openstack-ironic-inspector (Red Hat package) - update to 10.12.1-0.20220513095437.6dd37e5.el8
python-oslo-messaging (Red Hat package) - update to 12.13.0-0.20220509210748.2d090b5.el8
openstack-ironic (Red Hat package) - update to 20.2.1-0.20220628175043.b5ed57a.el8
python-packaging (Red Hat package) - update to 20.4-2.el8
docker-debuginfo - addressed in versions 20.10.17_ce-98.83.1, 20.10.17_ce-150000.166.1
docker - addressed in versions 20.10.17_ce-98.83.1, 20.10.17_ce-150000.166.1
docker-zsh-completion - update to 20.10.17_ce-150000.166.1
docker-kubic-zsh-completion - update to 20.10.17_ce-150000.166.1
docker-kubic-fish-completion - update to 20.10.17_ce-150000.166.1
docker-kubic-bash-completion - update to 20.10.17_ce-150000.166.1
docker-fish-completion - update to 20.10.17_ce-150000.166.1
docker-bash-completion - update to 20.10.17_ce-150000.166.1
docker-kubic-kubeadm-criconfig - update to 20.10.17_ce-150000.166.1
docker-kubic-debuginfo - update to 20.10.17_ce-150000.166.1
docker-kubic - update to 20.10.17_ce-150000.166.1
python-keyring (Red Hat package) - update to 21.0.0-2.el8
ovn22.03 (Red Hat package) - update to 22.03.0-37.el8fdp
ovn22.06 (Red Hat package) - update to 22.06.0-27.el8fdp

• https://github.com/opencontainers/runc/releases/tag/v1.1.2

• Privilege escalation in runc
• SUSE update for containerd
• SUSE update for containerd, docker and runc
• Privilege escalation in storage
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• SUSE update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
• SUSE update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
• Red Hat Enterprise Linux 8 update for the container-tools:4.0 module
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 9 update for runc
• Multiple vulnerabilities in Dell VxRail Appliance components
• IBM Edge Application Manager update for runc
• Permissions, Privileges, and Access Controls in IBM Edge Application Manager
• Ubuntu update for runc
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in Dell PowerStore Family
• openEuler update for runc
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data
• Amazon Linux AMI update for runc
• Gentoo update for runc
• Multiple vulnerabilities in IBM Concert
• Multiple vulnerabilities in IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11 packages
• Fedora 36 update for golang-github-opencontainers-runc
• Fedora 35 update for golang-github-opencontainers-runc
• Fedora 34 update for golang-github-opencontainers-runc
• Amazon Linux AMI update for runc
• Multiple vulnerabilities in IBM Storage Defender - Resiliency Service
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM DB2 Data Management Console