Read the docs
Red Hat Security Advisory

RHSA-2024:0564

container-tools:3.0 security update

Released 2024-01-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 48

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05994 Published 2022-02-15 Partial fix · 1.11.1 CWE-400
TI-2023-13160 CVE-2023-28642 · GHSA-g2j6-57v7-gm8c

AppArmor bypass with symlinked /proc in runc

Priority LOW 34

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00343 Published 2023-03-29 Partial fix · 1.1.5 CWE-281