ALT-PU-2026-5504-3

Обновление пакета crun в ветке c10f2

Версия1.27-alt1
Задание#413690
Опубликовано2026-04-01
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (1)

CVE-2026-30892
HIGH7.8

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.

Опубликовано: 2026-03-26Изменено: 2026-03-27
CVSS 3.xВЫСОКАЯ 7.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H