Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 620
Alerts This Week
Warning Icon 1 620

Ubuntu 21.10, 20.04 USN-5311-2 Critical Containerd Access Issue

ubuntu
Calendar Grey May 16, 2022
Dist Ubuntu Esm H88
A security notice from Ubuntu addresses a Containerd regression due to an oversight in USN-5311-1. Users should apply updated packages to secure their systems
USN-5311-1 fix was reverted by mistake in containerd.

Summary

USN-5311-1 fix was reverted by mistake in containerd.

Software Description:

- containerd: daemon to control runC

Details:

USN-5311-1 released updates for contained. Unfortunately, a subsequent update

reverted the fix for this CVE by mistake. This update corrects the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that containerd allows attackers to gain access to read-

only copies of arbitrary files and directories on the host via a specially-

crafted image configuration. An attacker could possibly use this issue to

obtain sensitive information.

Topics%20covered

Topics Covered

security advisory critical access issue ubuntu containerd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  containerd                      1.5.9-0ubuntu1~21.10.3

Ubuntu 20.04 LTS:
  containerd                      1.5.9-0ubuntu1~20.04.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5311-1

CVE-2022-23648

Severity
critical
Lowest
Low
Medium
High
Critical

May 16, 2022

Topics%20covered

Topics Covered

security advisory critical access issue ubuntu containerd

Package Information

https://launchpad.net/ubuntu/+source/containerd/1.5.9-0ubuntu1~21.10.3
https://launchpad.net/ubuntu/+source/containerd/1.5.9-0ubuntu1~20.04.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.