SUSE-SU-2022:1689-1
SUSE-SU-2022:1689-1 · Security update for containerd, docker
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for containerd, docker fixes the following issues: - CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517). - CVE-2022-23648: Fixed directory traversal issue (bsc#1196441). - CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284). - CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).
Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
containerd SUSE:Linux Enterprise Module for Containers 15 SP3
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise Module for Containers 15 SP3
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise Module for Containers 15 SP4
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise Module for Containers 15 SP4
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise Module for Package Hub 15 SP3
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
containerd SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
docker SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 20.10.14_ce-150000.163.1
Update to 20.10.14_ce-150000.163.1
containerd SUSE:Linux Enterprise Server 15 SP2-BCL
- Affected ranges
- ECOSYSTEM: < 1.5.11-150000.68.1
Update to 1.5.11-150000.68.1
Original sources
- https://www.suse.com/support/update/announcement/2022/suse-su-20221689-1/
- https://bugzilla.suse.com/1193930
- https://bugzilla.suse.com/1196441
- https://bugzilla.suse.com/1197284
- https://bugzilla.suse.com/1197517
- https://www.suse.com/security/cve/CVE-2021-43565
- https://www.suse.com/security/cve/CVE-2022-23648
- https://www.suse.com/security/cve/CVE-2022-24769
- https://www.suse.com/security/cve/CVE-2022-27191
- https://osv.dev/vulnerability/SUSE-SU-2022:1689-1