openSUSE-SU-2020:0846-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:0846-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2020:0846-1
Related
Published
2020-06-22T18:17:50Z
Modified
2020-06-22T18:17:50Z
Summary
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
Details

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13

  • CVE-2020-13401: Fixed an issue where an attacker with CAPNETRAW capability, could have crafted IPv6 router advertisements, and spoof external IPv6 hosts, resulting in obtaining sensitive information or causing denial of service (bsc#1172377).

This update was imported from the SUSE:SLE-15:Update update project.

References

Affected packages

openSUSE:Leap 15.1 / containerd

Package

Name
containerd
Purl
purl:rpm/suse/containerd&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.13-lp151.2.12.1

Ecosystem specific

{
    "binaries": [
        {
            "containerd-ctr": "1.2.13-lp151.2.12.1",
            "docker-zsh-completion": "19.03.11_ce-lp151.2.18.1",
            "golang-github-docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "containerd": "1.2.13-lp151.2.12.1",
            "docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "docker-bash-completion": "19.03.11_ce-lp151.2.18.1",
            "docker-runc": "1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1",
            "docker": "19.03.11_ce-lp151.2.18.1",
            "docker-test": "19.03.11_ce-lp151.2.18.1"
        }
    ]
}

openSUSE:Leap 15.1 / docker

Package

Name
docker
Purl
purl:rpm/suse/docker&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
19.03.11_ce-lp151.2.18.1

Ecosystem specific

{
    "binaries": [
        {
            "containerd-ctr": "1.2.13-lp151.2.12.1",
            "docker-zsh-completion": "19.03.11_ce-lp151.2.18.1",
            "golang-github-docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "containerd": "1.2.13-lp151.2.12.1",
            "docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "docker-bash-completion": "19.03.11_ce-lp151.2.18.1",
            "docker-runc": "1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1",
            "docker": "19.03.11_ce-lp151.2.18.1",
            "docker-test": "19.03.11_ce-lp151.2.18.1"
        }
    ]
}

openSUSE:Leap 15.1 / docker-runc

Package

Name
docker-runc
Purl
purl:rpm/suse/docker-runc&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1

Ecosystem specific

{
    "binaries": [
        {
            "containerd-ctr": "1.2.13-lp151.2.12.1",
            "docker-zsh-completion": "19.03.11_ce-lp151.2.18.1",
            "golang-github-docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "containerd": "1.2.13-lp151.2.12.1",
            "docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "docker-bash-completion": "19.03.11_ce-lp151.2.18.1",
            "docker-runc": "1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1",
            "docker": "19.03.11_ce-lp151.2.18.1",
            "docker-test": "19.03.11_ce-lp151.2.18.1"
        }
    ]
}

openSUSE:Leap 15.1 / golang-github-docker-libnetwork

Package

Name
golang-github-docker-libnetwork
Purl
purl:rpm/suse/golang-github-docker-libnetwork&distro=openSUSE%20Leap%2015.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1

Ecosystem specific

{
    "binaries": [
        {
            "containerd-ctr": "1.2.13-lp151.2.12.1",
            "docker-zsh-completion": "19.03.11_ce-lp151.2.18.1",
            "golang-github-docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "containerd": "1.2.13-lp151.2.12.1",
            "docker-libnetwork": "0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1",
            "docker-bash-completion": "19.03.11_ce-lp151.2.18.1",
            "docker-runc": "1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1",
            "docker": "19.03.11_ce-lp151.2.18.1",
            "docker-test": "19.03.11_ce-lp151.2.18.1"
        }
    ]
}