CVE:CVE-2019-18837
CNNVD:CNNVD-201911-634
crun是一款使用C语言编写的OCI（开放容器倡议）容器运行时库。
crun 0.10.5之前版本中存在后置链接漏洞。攻击者可利用该漏洞获取容器外部的文件。
solution:Upgrade crun_project crun to a higher version than 0.10.5,and avoid the version (,0.10.5); Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31