Описание
Security update for podman
This update for podman fixes the following issues:
Security issue fixed:
- CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Список пакетов
openSUSE Leap 15.1
podman-1.4.4-lp151.3.6.1
podman-cni-config-1.4.4-lp151.3.6.1
Ссылки
- E-Mail link for openSUSE-SU-2019:2143-1
- SUSE Security Ratings
- SUSE Bug 1144065
- SUSE CVE CVE-2019-10214 page
Описание
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.
Затронутые продукты
openSUSE Leap 15.1:podman-1.4.4-lp151.3.6.1
openSUSE Leap 15.1:podman-cni-config-1.4.4-lp151.3.6.1
Ссылки
- CVE-2019-10214
- SUSE Bug 1144065