openSUSE-SU-2022:0334-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2022:0334-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2022:0334-1
- Related
- Published
- 2022-02-04T08:31:13Z
- Modified
- 2022-02-04T08:31:13Z
- Summary
- Security update for containerd, docker
- Details
-
This update for containerd, docker fixes the following issues:
- CVE-2021-41089: Fixed 'cp' can chmod host files (bsc#1191015).
- CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434).
- CVE-2021-41092: Fixed exposed user credentials with a misconfigured configuration file (bsc#1191334).
- CVE-2021-41103: Fixed file access to local users in containerd (bsc#1191121).
- CVE-2021-41190: Fixed OCI manifest and index parsing confusion (bsc#1193273).
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULRUJXC3YBVKDKJAERWLY6BKJ7U3246G/
- https://bugzilla.suse.com/1191015
- https://bugzilla.suse.com/1191121
- https://bugzilla.suse.com/1191334
- https://bugzilla.suse.com/1191434
- https://bugzilla.suse.com/1193273
- https://www.suse.com/security/cve/CVE-2021-41089
- https://www.suse.com/security/cve/CVE-2021-41091
- https://www.suse.com/security/cve/CVE-2021-41092
- https://www.suse.com/security/cve/CVE-2021-41103
- https://www.suse.com/security/cve/CVE-2021-41190
Affected packages
openSUSE:Leap 15.3 / containerd
Package
- Name
- containerd
- Purl
- pkg:rpm/opensuse/containerd&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.4.12-60.1
Ecosystem specific
{
"binaries": [
{
"docker-kubic": "20.10.12_ce-159.1",
"docker-zsh-completion": "20.10.12_ce-159.1",
"docker-kubic-bash-completion": "20.10.12_ce-159.1",
"containerd": "1.4.12-60.1",
"docker-kubic-fish-completion": "20.10.12_ce-159.1",
"docker-kubic-kubeadm-criconfig": "20.10.12_ce-159.1",
"docker-kubic-zsh-completion": "20.10.12_ce-159.1",
"docker-bash-completion": "20.10.12_ce-159.1",
"docker": "20.10.12_ce-159.1",
"docker-fish-completion": "20.10.12_ce-159.1",
"containerd-ctr": "1.4.12-60.1"
}
]
}
openSUSE:Leap 15.3 / docker
Package
- Name
- docker
- Purl
- pkg:rpm/opensuse/docker&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed20.10.12_ce-159.1
Ecosystem specific
{
"binaries": [
{
"docker-kubic": "20.10.12_ce-159.1",
"docker-zsh-completion": "20.10.12_ce-159.1",
"docker-kubic-bash-completion": "20.10.12_ce-159.1",
"containerd": "1.4.12-60.1",
"docker-kubic-fish-completion": "20.10.12_ce-159.1",
"docker-kubic-kubeadm-criconfig": "20.10.12_ce-159.1",
"docker-kubic-zsh-completion": "20.10.12_ce-159.1",
"docker-bash-completion": "20.10.12_ce-159.1",
"docker": "20.10.12_ce-159.1",
"docker-fish-completion": "20.10.12_ce-159.1",
"containerd-ctr": "1.4.12-60.1"
}
]
}
openSUSE:Leap 15.3 / docker-kubic
Package
- Name
- docker-kubic
- Purl
- pkg:rpm/opensuse/docker-kubic&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed20.10.12_ce-159.1
Ecosystem specific
{
"binaries": [
{
"docker-kubic": "20.10.12_ce-159.1",
"docker-zsh-completion": "20.10.12_ce-159.1",
"docker-kubic-bash-completion": "20.10.12_ce-159.1",
"containerd": "1.4.12-60.1",
"docker-kubic-fish-completion": "20.10.12_ce-159.1",
"docker-kubic-kubeadm-criconfig": "20.10.12_ce-159.1",
"docker-kubic-zsh-completion": "20.10.12_ce-159.1",
"docker-bash-completion": "20.10.12_ce-159.1",
"docker": "20.10.12_ce-159.1",
"docker-fish-completion": "20.10.12_ce-159.1",
"containerd-ctr": "1.4.12-60.1"
}
]
}