SUSE-SU-2021:4059-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2021:4059-1

Related

Published

2021-12-14T11:47:19Z

Modified

2021-12-14T11:47:19Z

Summary

Security update for runc

Details

This update for runc fixes the following issues:

Update to runc v1.0.3.

CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436)
Fixed inability to start a container with read-write bind mount of a read-only fuse host mount.
Fixed inability to start when read-only /dev in set in spec.
Fixed not removing sub-cgroups upon container delete, when rootless cgroup v2 is used with older systemd.
Fixed returning error from GetStats when hugetlb is unsupported (which causes excessive logging for kubernetes).

References

Affected packages

Name: runc
Purl: purl:rpm/suse/runc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.3-16.18.1

{
    "binaries": [
        {
            "runc": "1.0.3-16.18.1"
        }
    ]
}