Skip to content
OpenAdvisories
High ELSA-2021-15790 1 CVE

Important: containerd security update (Oracle Linux 7)

Published Jul 23, 2021 · Updated Jul 23, 2021

Ecosystem: Oracle Linux

Summary

containerd
[1.4.8-1]
- Address CVE-2021-32760

docker-cli
[19.03.11-13]
- updated containerd minimum version to 1.4.8 to address CVE-2021-32760.

docker-engine
[19.03.11-13]
- updated containerd minimum version to 1.4.8 to address CVE-2021-32760.

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 containerd 0:1.4.8-1.el7
Oracle Linux · 7 docker-cli 0:19.03.11.ol-13.el7
Oracle Linux · 7 docker-engine 0:19.03.11.ol-13.el7

Vulnerabilities 1

  • Medium 5.0
    CVE-2021-32760

    Archive package allows chmod of file outside of unpack target directory

    containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes…

    containerd containerd ctop containerd Debian Ubuntu Azure Linux Alpine Wolfi Go