Sicherheit: Mangelnde Eingabeprüfung in containernetworking-plugins
Aktuelle Meldungen Distributionen
Name: Mangelnde Eingabeprüfung in containernetworking-plugins
ID: FEDORA-2021-fb466fb623
Distribution: Fedora
Plattformen: Fedora 33
Datum: Fr, 26. Februar 2021, 05:58
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20206
Applikationen: containernetworking-plugins


Fedora Update Notification
2021-02-26 01:07:35.018897

Name : containernetworking-plugins
Product : Fedora 33
Version : 0.9.1
Release : 2.fc33
URL : https://github.com/containernetworking/plugins
Summary : Libraries for writing CNI plugin
Description :
The CNI (Container Network Interface) project consists of a specification
and libraries for writing plugins to configure network interfaces in Linux
containers, along with a number of supported plugins. CNI concerns itself
only with network connectivity of containers and removing allocated resources
when the container is deleted.

Update Information:

bump podman to v3.0.1, Security fix for CVE-2021-20206 ---- Resolves:
#1919391, #1926796 - Security fix for CVE-2021-20206 ---- Autobuilt v1.19.3
---- Autobuilt v1.19.2 ---- Autobuilt v1.19.1 ---- Autobuilt v1.19.0 ----
harden cgo based golang binaries ---- Autobuilt v0.9.1

* Thu Feb 11 2021 Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.9.1-2
- rebuild for OBS happiness
* Fri Feb 5 2021 RH Container Bot <rhcontainerbot@fedoraproject.org> -
- autobuilt v0.9.1

[ 1 ] Bug #1919391 - CVE-2021-20206 containernetworking-cni: Arbitrary path
injection via type field in CNI configuration

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-fb466fb623' at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Pro-Linux @Facebook
Neue Nachrichten