gpp_maybe Security update for containerd, docker, runc

SUSE-SLE-Module-Containers-15-SP2-2021-1954

This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594) * Switch version to use -ce suffix rather than _ce to avoid confusing other tools (bsc#1182476). * CVE-2021-21284: Fixed a potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732) * CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730). * btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081) runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962). * Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821). * Fixed /dev/null is not available (bsc#1168481). * CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405). containerd was updated to v1.4.4 * CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397). * Handle a requirement from docker (bsc#1181594).

• Release Date
  Jun 11 2021
• References
  Bugzilla: 1182451, 1175821, 1181641, 1182476, 1184768, 1181732, 1168481, 1181677, 1181749, 1175081, 1183024, 1183855, 1181730, 1184962, 1182947, 1185405, 1181594
  CVEs: CVE-2021-21285, CVE-2021-21284, CVE-2021-21334, CVE-2021-30465
• Type
  security
• Severity
  important

cloud_download Downloads

Containers Module 15.2 s390x

• Packages
  containerd
  Standalone OCI Container Daemon

  1.4.4-5.32.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  20.10.6_ce-6.49.3 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  20.10.6_ce-6.49.3 lock rpm

  runc
  Tool for spawning and running OCI containers

  1.0.0~rc93-1.14.2 lock rpm lock src

Containers Module 15.2 ppc64le

• Packages
  containerd
  Standalone OCI Container Daemon

  1.4.4-5.32.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  20.10.6_ce-6.49.3 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  20.10.6_ce-6.49.3 lock rpm

  runc
  Tool for spawning and running OCI containers

  1.0.0~rc93-1.14.2 lock rpm lock src

Containers Module 15.2 aarch64

• Packages
  containerd
  Standalone OCI Container Daemon

  1.4.4-5.32.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  20.10.6_ce-6.49.3 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  20.10.6_ce-6.49.3 lock rpm

  runc
  Tool for spawning and running OCI containers

  1.0.0~rc93-1.14.2 lock rpm lock src

Containers Module 15.2 x86_64

• Packages
  containerd
  Standalone OCI Container Daemon

  1.4.4-5.32.1 lock rpm lock src

  docker
  The Moby-project Linux container runtime

  20.10.6_ce-6.49.3 lock rpm lock src

  docker-bash-completion
  Bash Completion for docker

  20.10.6_ce-6.49.3 lock rpm

  runc
  Tool for spawning and running OCI containers

  1.0.0~rc93-1.14.2 lock rpm lock src