[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2021:1458-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":32,"duplicates":33,"related":34,"reserved_at":9,"published_at":44,"modified_at":45,"state":9,"summary":46,"references_raw":48,"kevs":221,"epss":9,"epss_history":222,"metrics":223,"affected":224},"SUSE-SU-2021:1458-1","Security update for containerd, docker, runc\n\nThis update for containerd, docker, runc fixes the following issues:\n\n- Docker was updated to 20.10.6-ce\n  *  Switch version to use -ce suffix rather than _ce to avoid confusing other\n     tools (bsc#1182476).\n  * CVE-2021-21284: Fixed a potential privilege escalation when the root user in \n    the remapped namespace has access to the host filesystem (bsc#1181732)\n  * CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest \n    crashes the dockerd daemon (bsc#1181730). \n\n- runc was updated to  v1.0.0~rc93 (bsc#1182451 and bsc#1184962).\n  * Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821).\n  * Fixed /dev/null is not available (bsc#1168481).\n  * Fixed an issue where podman hangs when spawned by salt-minion process (bsc#1149954).\n  * CVE-2019-19921: Fixed a race condition with shared mounts (bsc#1160452).\n  * CVE-2019-16884: Fixed an LSM bypass via malicious Docker image that mount \n    over a /proc directory (bsc#1152308).\n  * CVE-2019-5736: Fixed potential write attacks to the host runc binary (bsc#1121967).\n  * Fixed an issue where after a kernel-update docker doesn't run (bsc#1131314 bsc#1131553)\n  * Ensure that we always include the version information in runc (bsc#1053532).\n  \n- Switch to Go 1.13 for build.\n  * CVE-2018-16873: Fixed a potential remote code execution (bsc#1118897).\n  * CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces \n    in import paths (bsc#1118898).\n  * CVE-2018-16875: Fixed a CPU denial of service (bsc#1118899).\n  * Fixed an issue with building containers (bsc#1095817).\n\n- containerd was updated to v1.4.4\n  * CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397).\n  * Handle a requirement from docker (bsc#1181594).\n  * Install the containerd-shim* binaries and stop creating (bsc#1183024).\n  * update version to the one required by docker (bsc#1034053)\n\n- Use -buildmode=pie for tests and binary build (bsc#1048046, bsc#1051429)\n- Cleanup seccomp builds similar (bsc#1028638).\n- Update to handle the docker-runc removal, and drop the -kubic flavour (bsc#1181677, bsc#1181749)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30],{"_key":15},"CVE-2018-16873",{"_key":17},"CVE-2018-16874",{"_key":19},"CVE-2018-16875",{"_key":21},"CVE-2019-16884",{"_key":23},"CVE-2019-19921",{"_key":25},"CVE-2019-5736",{"_key":27},"CVE-2021-21284",{"_key":29},"CVE-2021-21285",{"_key":31},"CVE-2021-21334",[],[],[35,36,37,38,39,40,41,42,43],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},"2021-04-30T10:58:51Z","2026-02-04T02:16:12.876879Z",{"cisa_kev":47,"cisa_ransomware":47,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[49,55,60,64,68,72,76,80,84,88,92,96,100,104,108,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,172,176,180,184,189,193,197,201,205,209,213,217],{"url":50,"sources":51,"tags":53},"https://www.suse.com/support/update/announcement/2021/suse-su-20211458-1/",[52],"osv_suse",[54],"Advisory",{"url":56,"sources":57,"tags":58},"https://bugzilla.suse.com/1028638",[52],[59],"REPORT",{"url":61,"sources":62,"tags":63},"https://bugzilla.suse.com/1034053",[52],[59],{"url":65,"sources":66,"tags":67},"https://bugzilla.suse.com/1048046",[52],[59],{"url":69,"sources":70,"tags":71},"https://bugzilla.suse.com/1051429",[52],[59],{"url":73,"sources":74,"tags":75},"https://bugzilla.suse.com/1053532",[52],[59],{"url":77,"sources":78,"tags":79},"https://bugzilla.suse.com/1095817",[52],[59],{"url":81,"sources":82,"tags":83},"https://bugzilla.suse.com/1118897",[52],[59],{"url":85,"sources":86,"tags":87},"https://bugzilla.suse.com/1118898",[52],[59],{"url":89,"sources":90,"tags":91},"https://bugzilla.suse.com/1118899",[52],[59],{"url":93,"sources":94,"tags":95},"https://bugzilla.suse.com/1121967",[52],[59],{"url":97,"sources":98,"tags":99},"https://bugzilla.suse.com/1131314",[52],[59],{"url":101,"sources":102,"tags":103},"https://bugzilla.suse.com/1131553",[52],[59],{"url":105,"sources":106,"tags":107},"https://bugzilla.suse.com/1149954",[52],[59],{"url":109,"sources":110,"tags":111},"https://bugzilla.suse.com/1152308",[52],[59],{"url":113,"sources":114,"tags":115},"https://bugzilla.suse.com/1160452",[52],[59],{"url":117,"sources":118,"tags":119},"https://bugzilla.suse.com/1168481",[52],[59],{"url":121,"sources":122,"tags":123},"https://bugzilla.suse.com/1175081",[52],[59],{"url":125,"sources":126,"tags":127},"https://bugzilla.suse.com/1175821",[52],[59],{"url":129,"sources":130,"tags":131},"https://bugzilla.suse.com/1181594",[52],[59],{"url":133,"sources":134,"tags":135},"https://bugzilla.suse.com/1181641",[52],[59],{"url":137,"sources":138,"tags":139},"https://bugzilla.suse.com/1181677",[52],[59],{"url":141,"sources":142,"tags":143},"https://bugzilla.suse.com/1181730",[52],[59],{"url":145,"sources":146,"tags":147},"https://bugzilla.suse.com/1181732",[52],[59],{"url":149,"sources":150,"tags":151},"https://bugzilla.suse.com/1181749",[52],[59],{"url":153,"sources":154,"tags":155},"https://bugzilla.suse.com/1182451",[52],[59],{"url":157,"sources":158,"tags":159},"https://bugzilla.suse.com/1182476",[52],[59],{"url":161,"sources":162,"tags":163},"https://bugzilla.suse.com/1182947",[52],[59],{"url":165,"sources":166,"tags":167},"https://bugzilla.suse.com/1183024",[52],[59],{"url":169,"sources":170,"tags":171},"https://bugzilla.suse.com/1183397",[52],[59],{"url":173,"sources":174,"tags":175},"https://bugzilla.suse.com/1183855",[52],[59],{"url":177,"sources":178,"tags":179},"https://bugzilla.suse.com/1184768",[52],[59],{"url":181,"sources":182,"tags":183},"https://bugzilla.suse.com/1184962",[52],[59],{"url":185,"sources":186,"tags":187},"https://www.suse.com/security/cve/CVE-2018-16873",[52],[188],"WEB",{"url":190,"sources":191,"tags":192},"https://www.suse.com/security/cve/CVE-2018-16874",[52],[188],{"url":194,"sources":195,"tags":196},"https://www.suse.com/security/cve/CVE-2018-16875",[52],[188],{"url":198,"sources":199,"tags":200},"https://www.suse.com/security/cve/CVE-2019-16884",[52],[188],{"url":202,"sources":203,"tags":204},"https://www.suse.com/security/cve/CVE-2019-19921",[52],[188],{"url":206,"sources":207,"tags":208},"https://www.suse.com/security/cve/CVE-2019-5736",[52],[188],{"url":210,"sources":211,"tags":212},"https://www.suse.com/security/cve/CVE-2021-21284",[52],[188],{"url":214,"sources":215,"tags":216},"https://www.suse.com/security/cve/CVE-2021-21285",[52],[188],{"url":218,"sources":219,"tags":220},"https://www.suse.com/security/cve/CVE-2021-21334",[52],[188],[],[],[],[225,238,245],{"ecosystem":226,"name":227,"vendor":228,"product":229,"cpe_part":9,"purl_type":230,"purl_namespace":228,"purl_name":229,"source":9,"versions":231},"SUSE Linux Enterprise","containerd","suse","containerd&distro=SUSE Linux Enterprise Module for Containers 12","rpm",[232],{"version":233,"is_range":234,"range_type":235,"version_start":9,"version_start_type":9,"version_end":236,"version_end_type":237,"fixed_in":9},"lt1_4_4_16_38_1",true,"ecosystem","1.4.4-16.38.1","excluding",{"ecosystem":226,"name":239,"vendor":228,"product":240,"cpe_part":9,"purl_type":230,"purl_namespace":228,"purl_name":240,"source":9,"versions":241},"docker","docker&distro=SUSE Linux Enterprise Module for Containers 12",[242],{"version":243,"is_range":234,"range_type":235,"version_start":9,"version_start_type":9,"version_end":244,"version_end_type":237,"fixed_in":9},"lt20_10_6_ce_98_66_1","20.10.6_ce-98.66.1",{"ecosystem":226,"name":246,"vendor":228,"product":247,"cpe_part":9,"purl_type":230,"purl_namespace":228,"purl_name":247,"source":9,"versions":248},"runc","runc&distro=SUSE Linux Enterprise Module for Containers 12",[249],{"version":250,"is_range":234,"range_type":235,"version_start":9,"version_start_type":9,"version_end":251,"version_end_type":237,"fixed_in":9},"lt1_0_0~rc93_16_8_1","1.0.0~rc93-16.8.1"]