Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2020:0697-1 Moderate Update for cni Fixes in podman Released

suse
Calendar Grey March 16, 2020
Dist Suse Esm H88
SUSE Security Update: Fixes a moderate flaw in cni, cni-plugins, conmon, fuse-overlayfs, and podman.
An update that solves one vulnerability and has two fixes is now available

Summary

This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues: podman was updated to 1.8.0: - CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator (#3829 bsc#1155217) - The name of the cni-bridge in the default config changed from "cni0" to "podman-cni0" with podman-1.6.0. Add a %trigger to rename the bridge in the system to the new default if it exists. The trigger is only excuted when updating podman-cni-config from something older than 1.6.0. This is mainly needed for SLE where we're updating from 1.4.4 to 1.8.0 (bsc#1160460). Update podman to v1.8.0 (bsc#1160460): * Features - The podman system service command has been added, providing a preview

References

#1155217 #1160460 #1164390

Cross- CVE-2019-18466

Affected Products:

SUSE Linux Enterprise Module for Public Cloud 15-SP1

SUSE Linux Enterprise Module for Containers 15-SP1

https://www.suse.com/security/cve/CVE-2019-18466.html

https://bugzilla.suse.com/1155217

https://bugzilla.suse.com/1160460

https://bugzilla.suse.com/1164390

Announcement ID: SUSE-SU-2020:0697-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here