Zranitelnost v runc umožňuje únik z kontejneru (diskuse)

[cezz]

Zaujimavy fakt: tato zranitelnist sa tyka mnohych container-based technologii a je zneuzitelna v LXC, docker, Mesos, cri-o, containerd,...

Prekvapivo (teda mozno pre niekoho) systemd-nspawn nie je zranitelny:

After some discussion with the systemd-nspawn folks, it appears that they aren't vulnerable (because their method of attaching to a container uses a different method to LXC and runc).