Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1863-1

Опубликовано: 04 июн. 2021
Источник: suse-cvrf

Описание

Security update for umoci

This update for umoci fixes the following issues:

Update to v0.4.7 (bsc#1184147).

  • CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).

Список пакетов

SUSE Enterprise Storage 6
umoci-0.4.7-3.12.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
umoci-0.4.7-3.12.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
umoci-0.4.7-3.12.1
SUSE Linux Enterprise Module for Containers 15 SP2
umoci-0.4.7-3.12.1
SUSE Linux Enterprise Module for Containers 15 SP3
umoci-0.4.7-3.12.1
SUSE Linux Enterprise Server 15 SP1-BCL
umoci-0.4.7-3.12.1
SUSE Linux Enterprise Server 15 SP1-LTSS
umoci-0.4.7-3.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
umoci-0.4.7-3.12.1
SUSE Manager Proxy 4.0
umoci-0.4.7-3.12.1
SUSE Manager Retail Branch Server 4.0
umoci-0.4.7-3.12.1
SUSE Manager Server 4.0
umoci-0.4.7-3.12.1

Ссылки

Описание

Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.

Затронутые продукты
SUSE Enterprise Storage 6:umoci-0.4.7-3.12.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:umoci-0.4.7-3.12.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:umoci-0.4.7-3.12.1
SUSE Linux Enterprise Module for Containers 15 SP2:umoci-0.4.7-3.12.1
Ссылки