Skip to content
OpenAdvisories
High ELSA-2020-5964 1 CVE

Important: containerd security update (Oracle Linux 7)

Published Dec 3, 2020 · Updated Dec 3, 2020

Ecosystem: Oracle Linux

Summary

[1.3.9-2]
- BUILDINFO: commit=4737bd3784f16c18474a60d8678371108f995d7c
- Addresses CVE-2020-15257

[1.3.9-1]
- Added Oracle specific build files

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 containerd 0:1.3.9-2.el7

Vulnerabilities 1

  • Medium 5.2
    CVE-2020-15257 Public exploit

    containerd-shim API Exposed to Host Network Containers

    containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

    containerd containerd ctop docker.io Debian Ubuntu Alpine Wolfi Go