# CVE-2021-30465: criu: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... CVE-2021-30465 is fixed in 29 products on 1 platform, first by golang-github-opencontainers-runc-dev 1.0.0~rc93-0ubuntu1~18.04.2, released May 19, 2021. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2021-30465 - Priority: High - CVSS: 8.5 (Important) - EPSS: 0.1025 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: May 19, 2021 ## Description The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: vulnerable to symlink exchange attack (CVE-2021-30465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | buildah RHEL 8 | 0:1.19.7-2.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | buildah ol 8 | 0:1.19.7-1.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | buildah-tests RHEL 8 | 0:1.19.7-2.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | buildah-tests ol 8 | 0:1.19.7-1.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | cockpit-podman RHEL 8 | 0:29-2.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | cockpit-podman ol 8 | 0:29-2.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | conmon RHEL 8 | 2:2.0.26-3.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | conmon ol 8 | 2:2.0.26-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | container-selinux RHEL 8 | 2:2.162.0-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | container-selinux ol 8 | 2:2.158.0-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | containernetworking-plugins RHEL 8 | 0:0.9.1-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | containernetworking-plugins ol 8 | 0:0.9.1-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | containers-common RHEL 8 | 1:1.2.2-10.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | containers-common ol 8 | 1:1.2.2-7.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | crit RHEL 8 | 0:3.15-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | crit ol 8 | 0:3.15-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | criu RHEL 8 | 0:3.15-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | criu ol 8 | 0:3.15-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | crun RHEL 8 | 0:0.18-2.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | crun ol 8 | 0:0.18-2.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | fuse-overlayfs RHEL 8 | 0:1.4.0-3.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | fuse-overlayfs ol 8 | 0:1.4.0-2.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | golang-github-opencontainers-runc-dev Ubuntu 18.04.6 LTS (bionic) | 1.0.0~rc93-0ubuntu1~18.04.2 | [golang-github-opencontainers-runc-dev 1.0.0~rc93-0ubuntu1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-golang-github-opencontainers-runc-dev-1.0.0-rc93-0ubuntu1-18.04.2.md) | May 19, 2021 | | Linux | golang-github-opencontainers-runc-dev Ubuntu 20.04 LTS (focal) | 1.0.0~rc93-0ubuntu1~20.04.2 | [golang-github-opencontainers-runc-dev 1.0.0~rc93-0ubuntu1~20.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-golang-github-opencontainers-runc-dev-1.0.0-rc93-0ubuntu1-20.04.2.md) | May 19, 2021 | | Linux | libslirp RHEL 8 | 0:4.3.1-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | libslirp ol 8 | 0:4.3.1-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | libslirp-devel RHEL 8 | 0:4.3.1-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | libslirp-devel ol 8 | 0:4.3.1-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.0-2.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.0-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | podman RHEL 8 | 0:3.0.1-7.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | podman ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | podman-catatonit RHEL 8 | 0:3.0.1-7.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | podman-catatonit ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | podman-docker RHEL 8 | 0:3.0.1-7.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | podman-docker ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | podman-plugins RHEL 8 | 0:3.0.1-7.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | podman-plugins ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | podman-remote RHEL 8 | 0:3.0.1-7.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | podman-remote ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | podman-tests RHEL 8 | 0:3.0.1-7.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | podman-tests ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | python-podman-api RHEL 8 | 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+10193+e90fd8eb | [RHSA-2021:2291](https://patchblox.com/security/data/fix/linux/rhsa-2021-2291.md) | Jun 8, 2021 | | Linux | python-podman-api ol 8 | 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+20172+38c78bba | [ELSA-2021-2291](https://patchblox.com/security/data/fix/linux/elsa-2021-2291.md) | Jun 10, 2021 | | Linux | python3-criu RHEL 8 | 0:3.15-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | python3-criu ol 8 | 0:3.15-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | runc RHEL 8 | 0:1.0.0-73.rc93.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | runc Ubuntu 18.04.6 LTS (bionic) | 1.0.0~rc93-0ubuntu1~18.04.2 | [runc 1.0.0~rc93-0ubuntu1~18.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-runc-1.0.0-rc93-0ubuntu1-18.04.2.md) | May 19, 2021 | | Linux | runc Ubuntu 20.04 LTS (focal) | 1.0.0~rc93-0ubuntu1~20.04.2 | [runc 1.0.0~rc93-0ubuntu1~20.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-runc-1.0.0-rc93-0ubuntu1-20.04.2.md) | May 19, 2021 | | Linux | runc ol 8 | 0:1.0.0-71.rc92.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | skopeo RHEL 8 | 1:1.2.2-10.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | skopeo ol 8 | 1:1.2.2-7.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | skopeo-tests RHEL 8 | 1:1.2.2-10.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | skopeo-tests ol 8 | 1:1.2.2-7.0.1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | slirp4netns RHEL 8 | 0:1.1.8-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | slirp4netns ol 8 | 0:1.1.8-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | | Linux | toolbox RHEL 8 | 0:0.0.8-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | udica RHEL 8 | 0:0.2.4-1.module+el8.4.0+11311+9da8acfb | [RHSA-2021:2371](https://patchblox.com/security/data/fix/linux/rhsa-2021-2371.md) | Jun 10, 2021 | | Linux | udica ol 8 | 0:0.2.4-1.module+el8.4.0+20196+91e9c2ae | [ELSA-2021-2370](https://patchblox.com/security/data/fix/linux/elsa-2021-2370.md) | Jun 14, 2021 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.