p PatchFirst

SUSE-SU-2023:4727-1

SUSE-SU-2023:4727-1 · Security update for catatonit, containerd, runc

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update of runc and containerd fixes the following issues: containerd: - Update to containerd v1.7.8. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.8 * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528) catatonit: - Update to catatonit v0.2.0. * Change license to GPL-2.0-or-later. - Update to catatont v0.1.7 * This release adds the ability for catatonit to be used as the only process in a pause container, by passing the -P flag (in this mode no subprocess is spawned and thus no signal forwarding is done). - Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to socket activation or features somewhat adjacent to socket activation (such as passing file descriptors). runc: - Update to runc v1.1.10. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.10

Fix available

Published
Updated

Stack: system · containers

Affected products and versions

  • containerd SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • containerd SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • containerd SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • containerd SUSE:Linux Enterprise Module for Containers 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise Module for Containers 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • containerd SUSE:Linux Enterprise Module for Containers 15 SP5

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise Module for Containers 15 SP5

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • catatonit SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 0.2.0-150000.3.6.1

    Update to 0.2.0-150000.3.6.1

  • containerd SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • catatonit SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 0.2.0-150000.3.6.1

    Update to 0.2.0-150000.3.6.1

  • containerd SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • containerd SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • containerd SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • catatonit SUSE:Linux Enterprise Server 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 0.2.0-150000.3.6.1

    Update to 0.2.0-150000.3.6.1

  • containerd SUSE:Linux Enterprise Server 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.7.8-150000.103.1

    Update to 1.7.8-150000.103.1

  • runc SUSE:Linux Enterprise Server 15 SP1-LTSS

    Affected ranges
    • ECOSYSTEM: < 1.1.10-150000.55.1

    Update to 1.1.10-150000.55.1

  • catatonit SUSE:Linux Enterprise Server 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 0.2.0-150000.3.6.1

    Update to 0.2.0-150000.3.6.1

Original sources

Check your server →