Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 33 FEDORA-2021-fb466fb623 Critical Podman Security Fix

fedora
Calendar Grey February 25, 2021
Dist Fedora Esm H88
The update for containers-common in Fedora 33 resolves the security vulnerability identified as CVE-2021-20206, which is accompanied by an upgrade to the podman package.
bump podman to v3.0.1, Security fix for CVE-2021-20206 ---- Resolves: #1919391, #1926796 - Security fix for CVE-2021-20206 ---- Autobuilt v1.19.3 ---- Autobuilt v1.19.2 ---- Autob...

Summary

This package contains common configuration files and documentation for container

tools ecosystem, such as Podman, Buildah and Skopeo.

It is required because the most of configuration files and docs come from projects

which are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged

separately.

bump podman to v3.0.1, Security fix for CVE-2021-20206 ---- Resolves:

#1919391, #1926796 - Security fix for CVE-2021-20206 ---- Autobuilt v1.19.3

---- Autobuilt v1.19.2 ---- Autobuilt v1.19.1 ---- Autobuilt v1.19.0 ----harden cgo based golang binaries ---- Autobuilt v0.9.1

[ 1 ] Bug #1919391 - CVE-2021-20206 containernetworking-cni: Arbitrary path injection via type field in CNI configuration

https://bugzilla.redhat.com/show_bug.cgi?id=1919391

su -c 'dnf upgrade --advisory FEDORA-2021-fb466fb623' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 33
Version: 1
Release: 4.fc33
URL: None
Summary: Common configuration and documentation for containers

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here