Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:1625-1

Опубликовано: 28 мар. 2023
Источник: suse-cvrf

Описание

Security update for docker

This update for docker fixes the following issues:

  • CVE-2022-36109: Fixed a supplementary group permissions bypass (bsc#1205375).

Update to 20.10.23-ce (https://docs.docker.com/engine/release-notes/#201023).

  • drop kubic flavor as kubic is EOL.

Update to Docker 20.10.21-ce (https://docs.docker.com/engine/release-notes/#201021 bsc#1206065).

  • Fix wrong After: in docker.service, fixes bsc#1188447
  • Build with Go 1.18.

Список пакетов

Image SLES12-SP5-Azure-Basic-On-Demand
docker-20.10.23_ce-98.89.1
Image SLES12-SP5-Azure-Standard-On-Demand
docker-20.10.23_ce-98.89.1
Image SLES12-SP5-EC2-ECS-On-Demand
docker-20.10.23_ce-98.89.1
Image SLES12-SP5-EC2-On-Demand
docker-20.10.23_ce-98.89.1
Image SLES12-SP5-GCE-On-Demand
docker-20.10.23_ce-98.89.1
SUSE Linux Enterprise Module for Containers 12
docker-20.10.23_ce-98.89.1

Ссылки

Описание

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. This bug is fixed in Moby (Docker Engine) 20.10.18. Running containers should be stopped and restarted for the permissions to be fixed. For users unable to upgrade, this problem can be worked around by not using the `"USER $USERNAME"` Dockerfile instruction. Instead by calling `ENTRYPOINT ["su", "-", "user"]` the supplementary groups will be set up properly.

Затронутые продукты
Image SLES12-SP5-Azure-Basic-On-Demand:docker-20.10.23_ce-98.89.1
Image SLES12-SP5-Azure-Standard-On-Demand:docker-20.10.23_ce-98.89.1
Image SLES12-SP5-EC2-ECS-On-Demand:docker-20.10.23_ce-98.89.1
Image SLES12-SP5-EC2-On-Demand:docker-20.10.23_ce-98.89.1
Ссылки