SUSE-SU-2022:4593-1

Details

This update for cni-plugins fixes the following issues:

CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).

Affected Packages

cni-plugins

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

Fixed in:

0.8.6-150100.3.11.1

References

REPORT

https://bugzilla.suse.com/1181961

WEB

https://www.suse.com/security/cve/CVE-2021-20206

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224593-1/