Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1116-1

Опубликовано: 09 апр. 2021
Источник: suse-cvrf

Описание

Security update for umoci

This update for umoci fixes the following issues:

  • Update to umoci v0.4.6.
  • CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147)

Список пакетов

SUSE Enterprise Storage 6
umoci-0.4.6-3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
umoci-0.4.6-3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
umoci-0.4.6-3.9.1
SUSE Linux Enterprise Module for Containers 15 SP2
umoci-0.4.6-3.9.1
SUSE Linux Enterprise Server 15 SP1-BCL
umoci-0.4.6-3.9.1
SUSE Linux Enterprise Server 15 SP1-LTSS
umoci-0.4.6-3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
umoci-0.4.6-3.9.1
SUSE Manager Proxy 4.0
umoci-0.4.6-3.9.1
SUSE Manager Retail Branch Server 4.0
umoci-0.4.6-3.9.1
SUSE Manager Server 4.0
umoci-0.4.6-3.9.1

Ссылки

Описание

Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.

Затронутые продукты
SUSE Enterprise Storage 6:umoci-0.4.6-3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:umoci-0.4.6-3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:umoci-0.4.6-3.9.1
SUSE Linux Enterprise Module for Containers 15 SP2:umoci-0.4.6-3.9.1
Ссылки