Bug 30050 - docker-containerd new security issue CVE-2021-43816
Summary: docker-containerd new security issue CVE-2021-43816
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2022-02-15 14:32 CET by David Walser
Modified: 2022-02-18 01:15 CET (History)
5 users (show)

See Also:
Source RPM: docker-containerd-1.5.8-1.mga9.src.rpm
CVE:
Status comment:


Attachments

David Walser 2022-02-15 14:32:36 CET

Whiteboard: (none) => MGA8TOO
Status comment: (none) => Fixed upstream in 1.5.9

Comment 1 Bruno Cornec 2022-02-15 19:56:39 CET
1.5.9 uploaded in cauldron and updates_testing for mga8.

CC: (none) => bruno
Status: NEW => ASSIGNED
Assignee: bruno => qa-bugs
Whiteboard: MGA8TOO => (none)

Thomas Backlund 2022-02-15 21:07:52 CET

Version: Cauldron => 8

Comment 2 David Walser 2022-02-15 22:41:05 CET
docker-containerd-1.5.9-1.mga8

from docker-containerd-1.5.9-1.mga8.src.rpm

Status comment: Fixed upstream in 1.5.9 => (none)

Comment 3 Len Lawrence 2022-02-16 12:56:31 CET
Mageia8, x86_64
User in docker group.
Updated from version 1.5.8-1
Restarted docker daemon and checked status.  OK.
# systemctl restart docker

Referred to earlier bugs for testing procedure, based on Bruno's docker lab.
See bug 29699 and earlier.

$ docker run hello-world

Hello from Docker!
This message shows that your installation appears to be working correctly.

$ docker run -it ubuntu bash
root@9e2d7d31a65b:/# ls -l
total 48
lrwxrwxrwx   1 root root    7 Jul 23  2021 bin -> usr/bin
drwxr-xr-x   2 root root 4096 Apr 15  2020 boot
drwxr-xr-x   5 root root  360 Feb 16 11:29 dev
......
root@9e2d7d31a65b:/# ls dev
console  fd    mqueue  ptmx  random  stderr  stdout  urandom
core     full  null    pts   shm     stdin   tty     zero
root@9e2d7d31a65b:/# sensible-browser
Couldn't find a suitable web browser!
Set the BROWSER environment variable to your desired browser.
root@9e2d7d31a65b:/# export BROWSER=firefox
root@9e2d7d31a65b:/# sensible-browser
/usr/bin/sensible-browser: 8: firefox: not found
Couldn't find a suitable web browser!
Set the BROWSER environment variable to your desired browser.
$ docker ps -a
CONTAINER ID   IMAGE           COMMAND       CREATED         STATUS                      PORTS     NAMES
9e2d7d31a65b   ubuntu          "bash"        7 minutes ago   Exited (1) 40 seconds ago             dreamy_mirzakhani
e3357860e46f   hello-world     "/hello"      9 minutes ago   Exited (0) 9 minutes ago              clever_shirley
8ff5be948ddd   fedora:latest   "/bin/bash"   2 months ago    Exited (127) 2 months ago             hardcore_mestorf
1274ea492638   ubuntu          "/bin/bash"   2 months ago    Exited (0) 2 months ago               dreamy_varahamihira
...........

Removed some older containers.
$ docker rm 57e1e97459b9 73cb1a30bba0 c91b7bc8d5b2 8be0163b7586 7a590701f872 4a976d45fb97 
57e1e97459b9
73cb1a30bba0
c91b7bc8d5b2
8be0163b7586
7a590701f872
4a976d45fb97

Ran one of the remaining containers:
$ docker run -it fedora:latest bash
[root@9e084dccc87c /]# dnf install celestia
.......
libxkbcommon                 x86_64  1.3.0-1.fc34                updates  144 k
 polkit                       x86_64  0.117-3.fc34.2              updates  146 k
 qrencode-libs                x86_64  4.1.1-1.fc34                updates   61 k
 systemd-networkd             x86_64  248.10-1.fc34               updates  474 k

Transaction Summary
=================================================================================
Install  190 Packages
Upgrade    1 Package

Total download size: 108 M
Is this ok [y/N]: y
<packages installed OK and listed>
  volume_key-libs-0.3.12-14.fc34.x86_64                                          
  xfsprogs-5.10.0-2.fc34.x86_64                                                  
  xkeyboard-config-2.33-1.fc34.noarch                                            
  xml-common-0.6.3-56.fc34.noarch                                                

Complete!
[root@9e084dccc87c /]# 

Had a go at running celestia but have no idea how to specify an X server.  Something for a rainy day.  It works as far as installation goes though.
Installed ruby.

[root@9e084dccc87c /]# ruby -e "puts Object.methods"
............
!=
equal?
instance_eval
instance_exec
__id__
__send__
[root@9e084dccc87c /]# exit

Giving this an OK for 64-bits.

Whiteboard: (none) => MGA8-64-OK
CC: (none) => tarazed25

Comment 4 Thomas Andrews 2022-02-17 21:45:48 CET
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Dave Hodgins 2022-02-18 00:03:30 CET

Keywords: (none) => advisory
CC: (none) => davidwhodgins

Comment 5 Mageia Robot 2022-02-18 01:15:38 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0071.html

Resolution: (none) => FIXED
Status: ASSIGNED => RESOLVED


Note You need to log in before you can comment on or make changes to this bug.