SUSE-SU-2022:4592-1

Details

This update for cni fixes the following issues:

CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).

Affected Packages

cni

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

Fixed in:

0.7.1-150100.3.8.1

References

REPORT

https://bugzilla.suse.com/1181961

WEB

https://www.suse.com/security/cve/CVE-2021-20206

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224592-1/