Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisoryfedorasoftware updateFedora 36 FEDORA-2022-cea20dae0b moderate: Moby-Engine Security Update
## moby-engine https://github.com/moby/moby/releases/tag/v20.10.17 Includes updates to bundled libraries that fix CVEs. ## golang-github-docker-libnetwork Bump to f6ccccb1c082a432c2a5814aaedaca56af33d9ea. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-cea20dae0b 2022-06-14 01:38:08.417589 --------------------------------------------------------------------------------Name : golang-github-docker-libnetwork Product : Fedora 36 Version : 0.8.0 Release : 17.20220610gitf6ccccb.fc36 URL : https://github.com/moby/libnetwork Summary : Native Go implementation for connecting containers Description : Libnetwork provides a native Go implementation for connecting containers. The goal of libnetwork is to deliver a robust Container Network Model that provides a consistent programming interface and the required network abstractions for applications. --------------------------------------------------------------------------------Update Information: ## moby-engine https://github.com/moby/moby/releases/tag/v20.10.17 Includes updates to bundled libraries that fix CVEs. ## golang-github-docker-libnetwork Bump to f6ccccb1c082a432c2a5814aaedaca56af33d9ea --------------------------------------------------------------------------------ChangeLog: * Fri Jun 10 2022 Maxwell G 0.8.0-17 - Bump to f6ccccb1c082a432c2a5814aaedaca56af33d9ea --------------------------------------------------------------------------------References: [ 1 ] Bug #2095714 - moby-engine-20.10.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=2095714 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-cea20dae0b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packagesare signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jun 13, 2022
•Important
Fedora
100
security advisorymoderatedenial of serviceSUSE: 2021:3827-2 Important: Kubernetes Security Update
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:1657-1 Rating: moderate References: #1172377 Cross-References: CVE-2020-13401 Affected Products: SUSE Linux Enterprise Module for Containers 15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 - CVE-2020-13401: Fixed an issue where an attacker with CAP_NET_RAW capability, could have crafted IPv6 router advertisements, and spoof external IPv6 hosts, resulting in obtaining sensitive information or causing denial of service (bsc#1172377). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Containers 15-SP1: zypper in -t patch SUSE-SLE-Module-Containers-15-SP1-2020-1657=1 Package List: - SUSE Linux Enterprise Module for Containers 15-SP1 (aarch64 ppc64le s390x x86_64): containerd-1.2.13-5.22.2 docker-19.03.11_ce-6.34.2 docker-debuginfo-19.03.11_ce-6.34.2 docker-libnetwork-0.7.0.1+gitr2902_153d0769a118-4.21.2 docker-libnetwork-debuginfo-0.7.0.1+gitr2902_153d0769a118-4.21.2 docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-6.38.2 docker-runc-debuginfo-1.0.0rc10+gitr3981_dc9208a3303f-6.38.2 - SUSE Linux Enterprise Module for Containers 15-SP1 (noarch): docker-bash-completion-19.03.11_ce-6.34.2 References: https://www.suse.com/security/cve/CVE-2020-13401.html https://bugzilla.suse.com/1172377 _______________________________________________ sle-security-updates mailing list
Jun 18, 2020
•Important
SuSE
100
security advisorySUSEdockerSUSE: 2020:0035-1 Moderate: LSM Bypass Fix in Docker Components
An update that solves one vulnerability and has 5 fixes is now available. . SUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:0035-1 Rating: moderate References: #1122469 #1143349 #1150397 #1152308 #1153367 #1158590 Cross-References: CVE-2019-16884 Affected Products: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Containers 15-SP1 SUSE Linux Enterprise Module for Containers 15 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory (bsc#1152308). Bug fixes: - Update to Docker 19.03.5-ce (bsc#1158590). - Update to Docker 19.03.3-ce (bsc#1153367). - Update to Docker 19.03.2-ce (bsc#1150397). - Fixed default installation such that --userns-remap=default works properly (bsc#1143349). - Fixed nginx blocked by apparmor (bsc#1122469). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-35=1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2020-35=1 - SUSE Linux Enterprise Module for Containers 15-SP1: zypper in -t patch SUSE-SLE-Module-Containers-15-SP1-2020-35=1 - SUSE Linux Enterprise Module for Containers 15: zypper in -t patch SUSE-SLE-Module-Containers-15-2020-35=1 Package List: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (aarch64 ppc64le s390x x86_64): containerd-ctr-1.2.10-5.19.1 containerd-kubic-1.2.10-5.19.1 containerd-kubic-ctr-1.2.10-5.19.1 docker-debuginfo-19.03.5_ce-6.31.1 docker-kubic-19.03.5_ce-6.31.1 docker-kubic-debuginfo-19.03.5_ce-6.31.1 docker-kubic-kubeadm-criconfig-19.03.5_ce-6.31.1 docker-kubic-test-19.03.5_ce-6.31.1 docker-kubic-test-debuginfo-19.03.5_ce-6.31.1 docker-libnetwork-kubic-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 docker-libnetwork-kubic-debuginfo-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 docker-runc-kubic-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 docker-runc-kubic-debuginfo-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 docker-test-19.03.5_ce-6.31.1 docker-test-debuginfo-19.03.5_ce-6.31.1 golang-github-docker-libnetwork-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 golang-github-docker-libnetwork-kubic-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (noarch): docker-kubic-bash-completion-19.03.5_ce-6.31.1 docker-kubic-zsh-completion-19.03.5_ce-6.31.1 docker-zsh-completion-19.03.5_ce-6.31.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64): containerd-ctr-1.2.10-5.19.1 docker-debuginfo-19.03.5_ce-6.31.1 docker-test-19.03.5_ce-6.31.1 docker-test-debuginfo-19.03.5_ce-6.31.1 golang-github-docker-libnetwork-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (noarch): docker-zsh-completion-19.03.5_ce-6.31.1 - SUSE Linux Enterprise Module for Containers 15-SP1 (aarch64 ppc64le s390x x86_64): containerd-1.2.10-5.19.1 docker-19.03.5_ce-6.31.1 docker-debuginfo-19.03.5_ce-6.31.1 docker-libnetwork-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 docker-runc-debuginfo-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 - SUSE Linux Enterprise Module for Containers 15-SP1 (noarch): docker-bash-completion-19.03.5_ce-6.31.1 - SUSE Linux Enterprise Module for Containers 15 (ppc64le s390x x86_64): containerd-1.2.10-5.19.1 docker-19.03.5_ce-6.31.1 docker-debuginfo-19.03.5_ce-6.31.1 docker-libnetwork-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 docker-runc-debuginfo-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 - SUSE Linux Enterprise Module for Containers 15 (noarch): docker-bash-completion-19.03.5_ce-6.31.1 References: https://www.suse.com/security/cve/CVE-2019-16884.html https://bugzilla.suse.com/1122469 https://bugzilla.suse.com/1143349 https://bugzilla.suse.com/1150397 https://bugzilla.suse.com/1152308 https://bugzilla.suse.com/1153367 https://bugzilla.suse.com/1158590 _______________________________________________ sle-security-updates mailing list
Jan 08, 2020
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!