Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 34: 2021-83b3740389 Critical DoS Threat in Containers-Common

fedora
Calendar Grey April 24, 2021
Dist Fedora Esm H88
Urgent Fedora Security Advisory regarding the mitigation of DoS threats in container runtime services, strengthens overall security measures.
crun and runc now both `Provides: oci-runtime`

Summary

This package contains common configuration files and documentation for container

tools ecosystem, such as Podman, Buildah and Skopeo.

It is required because the most of configuration files and docs come from projects

which are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged

separately.

crun and runc now both `Provides: oci-runtime`. ---- Security fix for

CVE-2021-20291 Autobuilt v1.20.1

* Fri Apr 16 2021 Lokesh Mandvekar - 4:1-15

- use config from latest upstream releases

- Add oci-runtime and container-selinux dependencies

* Mon Apr 12 2021 Lokesh Mandvekar - 4:1-14

- use configs from latest upstream versions

[ 1 ] Bug #1939485 - CVE-2021-20291 containers/storage: DoS via malicious image

https://bugzilla.redhat.com/show_bug.cgi?id=1939485

su -c 'dnf upgrade --advisory FEDORA-2021-83b3740389' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 34
Version: 1
Release: 15.fc34
URL: None
Summary: Common configuration and documentation for containers

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here