FlawAtlas
Search the atlas
SUSE-SU-2021:1954-1 Not scored

Security update for containerd, docker, runc

This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594) * Switch version to use -ce suffix rather than _ce to avoid confusing other tools (bsc#1182476). * CVE-2021-21284: Fixed a potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732) * CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730). * btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081) runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962). * Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821). * Fixed /dev/null is not available (bsc#1168481). * CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405). containerd was updated to v1.4.4 * CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397). * Handle a requirement from docker (bsc#1181594).

Exploit probability Not scored
Published June 11, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 6 runc
SUSE:Linux Enterprise Server 15 SP1-LTSS containerd
SUSE:Enterprise Storage 6 docker
SUSE:Linux Enterprise Server 15 SP1-LTSS docker
SUSE:Manager Retail Branch Server 4.0 containerd
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 containerd
SUSE:Manager Retail Branch Server 4.0 docker
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS runc
SUSE:Linux Enterprise Server for SAP Applications 15 containerd
SUSE:Linux Enterprise Server 15-LTSS docker
SUSE:Linux Enterprise Server 15 SP1-LTSS runc
SUSE:Linux Enterprise Server 15-LTSS runc
SUSE:Linux Enterprise Module for Containers 15 SP3 containerd
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS docker
SUSE:Manager Server 4.0 runc
SUSE:Linux Enterprise High Performance Computing 15-LTSS docker
SUSE:Manager Server 4.0 docker
SUSE:Linux Enterprise Module for Containers 15 SP2 runc
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS runc
SUSE:Linux Enterprise Module for Containers 15 SP2 containerd
SUSE:Linux Enterprise Module for Containers 15 SP3 runc
SUSE:Linux Enterprise High Performance Computing 15-LTSS containerd
SUSE:Manager Proxy 4.0 containerd
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS docker
SUSE:Linux Enterprise Server 15 SP1-BCL docker
SUSE:Enterprise Storage 6 containerd
SUSE:Linux Enterprise Module for Containers 15 SP3 docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 runc
SUSE:Linux Enterprise Micro 5.0 docker
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS containerd
SUSE:Manager Proxy 4.0 runc
SUSE:Manager Retail Branch Server 4.0 runc
SUSE:Linux Enterprise High Performance Computing 15-LTSS runc
SUSE:Enterprise Storage 7 runc
SUSE:Linux Enterprise Server 15 SP1-BCL containerd
SUSE:Linux Enterprise Micro 5.0 containerd
SUSE:Linux Enterprise Server 15 SP1-BCL runc
SUSE:Linux Enterprise High Performance Computing 15-ESPOS docker
SUSE:Linux Enterprise Server 15-LTSS containerd
SUSE:Linux Enterprise High Performance Computing 15-ESPOS runc
SUSE:Linux Enterprise Micro 5.0 runc
SUSE:Linux Enterprise Module for Containers 15 SP2 docker
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS containerd
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 docker
SUSE:Linux Enterprise High Performance Computing 15-ESPOS containerd
SUSE:Manager Server 4.0 containerd
SUSE:Linux Enterprise Server for SAP Applications 15 runc
SUSE:Manager Proxy 4.0 docker
SUSE:Linux Enterprise Server for SAP Applications 15 docker

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:1954-1

This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594) * Switch version to use -ce suffix rather than _ce to avoid confusing other tools (bsc#1182476). * CVE-2021-21284: Fixed a potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732) * CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730). * btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081) runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962). * Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821). * Fixed /dev/null is not available (bsc#1168481). * CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405). containerd was updated to v1.4.4 * CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397). * Handle a requirement from docker (bsc#1181594).

View original source

05 / REFERENCES

Further evidence