p PatchFirst

SUSE-SU-2022:0334-1

SUSE-SU-2022:0334-1 · Security update for containerd, docker

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files (bsc#1191015). - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434). - CVE-2021-41092: Fixed exposed user credentials with a misconfigured configuration file (bsc#1191334). - CVE-2021-41103: Fixed file access to local users in containerd (bsc#1191121). - CVE-2021-41190: Fixed OCI manifest and index parsing confusion (bsc#1193273).

Fix available

Published
Updated

Stack: system · containers

Affected products and versions

  • containerd SUSE:Linux Enterprise Module for Containers 15 SP3

    Affected ranges
    • ECOSYSTEM: < 1.4.12-60.1

    Update to 1.4.12-60.1

  • docker SUSE:Linux Enterprise Module for Containers 15 SP3

    Affected ranges
    • ECOSYSTEM: < 20.10.12_ce-159.1

    Update to 20.10.12_ce-159.1

  • containerd SUSE:Linux Enterprise Micro 5.0

    Affected ranges
    • ECOSYSTEM: < 1.4.12-60.1

    Update to 1.4.12-60.1

  • docker SUSE:Linux Enterprise Micro 5.0

    Affected ranges
    • ECOSYSTEM: < 20.10.12_ce-159.1

    Update to 20.10.12_ce-159.1

  • containerd SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 1.4.12-60.1

    Update to 1.4.12-60.1

  • docker SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 20.10.12_ce-159.1

    Update to 20.10.12_ce-159.1

Original sources

Check your server →