FlawAtlas
Search the atlas
SUSE-SU-2022:1689-1 Not scored

Security update for containerd, docker

This update for containerd, docker fixes the following issues: - CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517). - CVE-2022-23648: Fixed directory traversal issue (bsc#1196441). - CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284). - CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).

Exploit probability Not scored
Published May 16, 2022
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

openSUSE:Leap 15.3 docker-kubic
SUSE:Linux Enterprise Server 15 SP1-LTSS containerd
SUSE:Enterprise Storage 6 docker
SUSE:Linux Enterprise Server 15 SP1-LTSS docker
SUSE:Linux Enterprise Micro 5.1 docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 containerd
SUSE:Manager Proxy 4.1 docker
SUSE:Linux Enterprise Module for Package Hub 15 SP3 containerd
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 docker
SUSE:Linux Enterprise Server for SAP Applications 15 containerd
SUSE:Linux Enterprise Module for Containers 15 SP4 containerd
SUSE:Linux Enterprise Server 15-LTSS docker
SUSE:Manager Server 4.1 docker
SUSE:Linux Enterprise Module for Containers 15 SP3 containerd
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS docker
SUSE:Linux Enterprise High Performance Computing 15-LTSS docker
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS docker
SUSE:Manager Retail Branch Server 4.1 containerd
SUSE:Linux Enterprise Server 15 SP2-LTSS containerd
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS docker
SUSE:Linux Enterprise Server 15 SP2-BCL containerd
SUSE:Linux Enterprise High Performance Computing 15-LTSS containerd
openSUSE:Leap 15.3 containerd
SUSE:Linux Enterprise Server 15 SP2-BCL docker
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS docker
SUSE:Manager Retail Branch Server 4.1 docker
SUSE:Linux Enterprise Server 15 SP1-BCL docker
SUSE:Enterprise Storage 6 containerd
openSUSE:Leap 15.3 docker
openSUSE:Leap 15.4 containerd
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS containerd
SUSE:Linux Enterprise Module for Containers 15 SP3 docker
SUSE:Linux Enterprise Micro 5.0 docker
SUSE:Manager Server 4.1 containerd
SUSE:Linux Enterprise Module for Containers 15 SP4 docker
SUSE:Linux Enterprise Micro 5.2 containerd
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS containerd
SUSE:Linux Enterprise Micro 5.2 docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 containerd
SUSE:Manager Proxy 4.1 containerd
SUSE:Linux Enterprise Server 15 SP1-BCL containerd
SUSE:Enterprise Storage 7 docker
openSUSE:Leap 15.4 docker-kubic
SUSE:Linux Enterprise Micro 5.0 containerd
SUSE:Linux Enterprise High Performance Computing 15-ESPOS docker
SUSE:Linux Enterprise Server 15-LTSS containerd
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS containerd
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 docker
openSUSE:Leap 15.4 docker
SUSE:Linux Enterprise High Performance Computing 15-ESPOS containerd
SUSE:Linux Enterprise Server 15 SP2-LTSS docker
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS containerd
SUSE:Enterprise Storage 7 containerd
SUSE:Linux Enterprise Micro 5.1 containerd
SUSE:Linux Enterprise Server for SAP Applications 15 docker

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2022:1689-1

This update for containerd, docker fixes the following issues: - CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517). - CVE-2022-23648: Fixed directory traversal issue (bsc#1196441). - CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284). - CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).

View original source

05 / REFERENCES

Further evidence