Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

openSUSE Leap 15.1: 2020:2106-1 Moderate: Buildah Security Fix

opensuse
Calendar Grey November 29, 2020
Dist Opensuse Esm H88
A recent update for openSUSE addresses vulnerabilities in podman, tackling two critical security concerns while introducing performance improvements.
An update that fixes two vulnerabilities is now available.

Description

This update for buildah fixes the following issues:

buildah was updated to v1.17.0 (bsc#1165184):

* Handle cases where other tools mount/unmount containers * overlay.MountReadOnly: support RO overlay mounts

* overlay: use fusermount for rootless umounts

* overlay: fix umount

* Switch default log level of Buildah to Warn. Users need to see these

messages

* Drop error messages about OCI/Docker format to Warning level

* build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2

* tests/testreport: adjust for API break in storage v1.23.6

* build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7

* build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6

* copier: put: ignore Typeflag="g"

* Use curl to get repo file (fix #2714)

* build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0

* build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1

* Remove docs that refer to bors,...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate software update security fix openSUSE issues container buildah

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-2106=1

Package List

- openSUSE Leap 15.1 (x86_64):

buildah-1.17.0-lp151.2.6.1

References

https://www.suse.com/security/cve/CVE-2019-10214.html

https://www.suse.com/security/cve/CVE-2020-10696.html

https://bugzilla.suse.com/1165184

https://bugzilla.suse.com/1167864

--===============5559745400015135941=

Announcement ID: openSUSE-SU-2020:2106-1
Rating: moderate
Affected Products: openSUSE Leap 15.1

Topics%20covered

Topics Covered

security advisory moderate software update security fix openSUSE issues container buildah

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here