Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

openSUSE 15.5: 2023:4727-1 Important: CORS Bypass Fix in Containerd

opensuse
Calendar Grey December 14, 2023
Dist Opensuse Esm H88
Essential patch for containerd and runc addresses a serious CORS bypass security flaw. Review the information relevant to openSUSE users. Take immediate action!
This update of runc and containerd fixes the following issues: containerd:

Description

This update of runc and containerd fixes the following issues:

containerd:

* Update to containerd v1.7.8. Upstream release notes:

https://github.com/containerd/containerd/releases/tag/v1.7.8

* CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528)

catatonit:

* Update to catatonit v0.2.0.

* Change license to GPL-2.0-or-later.

* Update to catatont v0.1.7

* This release adds the ability for catatonit to be used as the only process

in a pause container, by passing the -P flag (in this mode no subprocess is

spawned and thus no signal forwarding is done).

* Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to

socket activation or features somewhat adjacent to socket activation (such

as passing file descriptors).

runc:

* Update to runc v1.1.10. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.1.10

Topics%20covered

Topics Covered

security advisory important openSUSE runc containerd CORS bypass

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap Micro 5.3

zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4727=1

* openSUSE Leap Micro 5.4

zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4727=1

* openSUSE Leap 15.4

zypper in -t patch openSUSE-SLE-15.4-2023-4727=1

* openSUSE Leap 15.5

zypper in -t patch openSUSE-SLE-15.5-2023-4727=1

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2023-4727=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2023-4727=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2023-4727=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2023-4727=1

* SUSE Linux Enterprise Micro 5.5

zypper in -t patch SUSE-SLE-Micro-5.5-2023-4727=1

* Containers Module 15-SP4

zypper in -t patch...

Read the Full Advisory

Package List

* openSUSE Leap Micro 5.3 (aarch64 x86_64)

* runc-debuginfo-1.1.10-150000.55.1

* containerd-1.7.8-150000.103.1

* runc-1.1.10-150000.55.1

* openSUSE Leap Micro 5.4 (aarch64 s390x x86_64)

* runc-debuginfo-1.1.10-150000.55.1

* containerd-1.7.8-150000.103.1

* runc-1.1.10-150000.55.1

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

* containerd-ctr-1.7.8-150000.103.1

* runc-debuginfo-1.1.10-150000.55.1

* containerd-1.7.8-150000.103.1

* runc-1.1.10-150000.55.1

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

* containerd-ctr-1.7.8-150000.103.1

* runc-debuginfo-1.1.10-150000.55.1

* runc-1.1.10-150000.55.1

* containerd-devel-1.7.8-150000.103.1

* containerd-1.7.8-150000.103.1

* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)

* runc-debuginfo-1.1.10-150000.55.1

* containerd-1.7.8-150000.103.1

* runc-1.1.10-150000.55.1

* SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)

* runc-debuginfo-1.1.10-150000.55.1

* containerd-1.7.8-150000.103.1

* runc-1.1.10-150000.55.1

* SUSE Linux Enterprise Micro...

Read the Full Advisory

References

* bsc#1200528

## References:

* https://www.suse.com/security/cve/CVE-2022-1996.html

* https://bugzilla.suse.com/show_bug.cgi?id=1200528

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4727-1
Rating: important

Topics%20covered

Topics Covered

security advisory important openSUSE runc containerd CORS bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here