Skip to content
OpenAdvisories
High ELSA-2020-5906 1 CVE

Important: containerd security update (Oracle Linux 7)

Published Nov 2, 2020 · Updated Nov 2, 2020

Ecosystem: Oracle Linux

Summary

[1.2.14-1.0.1]
- BUILDINFO: commit=259ae80da592d4f6b5e3cdc87202d36bc86a3579
- Addresses CVE-2020-15157

[1.2.14-1.0.0]
- Added Oracle specific build files

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 containerd 0:1.2.14-1.0.1.el7

Vulnerabilities 1

  • Medium 6.1
    CVE-2020-15157

    containerd can be coerced into leaking credentials during image pull

    In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific im…

    containerd containerd docker.io docker.io Debian Ubuntu Go