SUSE-SU-2022:0213-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:0213-1

Related

Published

2022-01-27T13:49:06Z

Modified

2022-01-27T13:49:06Z

Summary

Security update for containerd, docker

Details

This update for containerd, docker fixes the following issues:

CVE-2021-41089: Fixed 'cp' can chmod host files (bsc#1191015).
CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434).
CVE-2021-41092: Fixed exposed user credentials with a misconfigured configuration file (bsc#1191334).
CVE-2021-41103: Fixed file access to local users in containerd (bsc#1191121).
CVE-2021-41190: Fixed OCI manifest and index parsing confusion (bsc#1193273).

References

Affected packages

Name: containerd
Purl: purl:rpm/suse/containerd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.12-16.49.1

{
    "binaries": [
        {
            "containerd": "1.4.12-16.49.1",
            "docker": "20.10.12_ce-98.75.1"
        }
    ]
}

Name: docker
Purl: purl:rpm/suse/docker&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

20.10.12_ce-98.75.1

{
    "binaries": [
        {
            "containerd": "1.4.12-16.49.1",
            "docker": "20.10.12_ce-98.75.1"
        }
    ]
}