SUSE-SU-2022:0720-2 Security update for containerd

This update for containerd fixes the following issues: - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host bsc1196441...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-24769)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2022-1445)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In containerd an industry-standard container runtime before version 1.2.14 there is a credential leaking vulnerability. If a container...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2022-1424)

According to the versions of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In containerd an industry-standard container runtime before version 1.2.14 there is a credential leaking vulnerability. If a container...

Fedora: Security Advisory for golang-github-containerd-imgcrypt (FEDORA-2022-5f746c8e5b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for containerd (FEDORA-2022-ed53f2439a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-containerd-imgcrypt (FEDORA-2022-de0f8beeb0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for containerd (FEDORA-2022-e9a09c1a7d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: containerd-1.6.2-2.fc34

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

[SECURITY] Fedora 34 Update: golang-github-containerd-imgcrypt-1.1.4-1.fc34

OCI Image Encryption Package...

[SECURITY] Fedora 35 Update: containerd-1.6.2-1.fc35

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

[SECURITY] Fedora 35 Update: golang-github-containerd-imgcrypt-1.1.4-1.fc35

OCI Image Encryption Package...

CVE-2021-32760 affecting package moby-containerd for versions less than 1.4.4+azure-4

CVE-2021-32760 affecting package moby-containerd for versions less than 1.4.4+azure-4. A patched version of the package is available...

CVE-2021-41103 affecting package moby-containerd for versions less than 1.4.4+azure-4

CVE-2021-41103 affecting package moby-containerd for versions less than 1.4.4+azure-4. A patched version of the package is available...

The vulnerability of the Containerd execution environment, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of the Containerd runtime is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

Information Disclosure

github.com/containerd/imgcrypt is vulnerable to information disclosure. Remote unauthenticated attackers are able to gain access to view an image without providing keys if that image had previously been decrypted. This is possible because only the first architecture in an list is being validated...

Fedora: Security Advisory for containerd (FEDORA-2022-d9c9bf56f6)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: containerd-1.6.1-1.fc36

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Linuxfoundation Containerd

PoC for CVE-2022-23648 This is a proof of concept for @fel...

CVE-2022-24778

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the current used is...