OESA-2022-1671

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1671
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-1671.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2022-1671
Upstream
Published
2022-05-25T11:03:48Z
Modified
2025-08-12T05:12:41.776886Z
Summary
containerd security update
Details

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.

Security Fix(es):

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.(CVE-2022-23648)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / containerd

Package

Name
containerd
Purl
pkg:rpm/openEuler/containerd&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-202.oe1

Ecosystem specific 

{
    "src": [
        "containerd-1.2.0-202.oe1.src.rpm"
    ],
    "x86_64": [
        "containerd-1.2.0-202.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "containerd-1.2.0-202.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / containerd

Package

Name
containerd
Purl
pkg:rpm/openEuler/containerd&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-202.oe1

Ecosystem specific 

{
    "src": [
        "containerd-1.2.0-202.oe1.src.rpm"
    ],
    "x86_64": [
        "containerd-1.2.0-202.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "containerd-1.2.0-202.oe1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS / containerd

Package

Name
containerd
Purl
pkg:rpm/openEuler/containerd&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.0-301.oe2203

Ecosystem specific 

{
    "src": [
        "containerd-1.2.0-301.oe2203.src.rpm"
    ],
    "x86_64": [
        "containerd-1.2.0-301.oe2203.x86_64.rpm"
    ],
    "aarch64": [
        "containerd-1.2.0-301.oe2203.aarch64.rpm"
    ]
}