USN-5012-1: containerd vulnerabilities

Releases

• Ubuntu 21.04
• Ubuntu 20.10
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• containerd - daemon to control runC

Details

It was discovered that containerd incorrectly handled file permission
changes. If a user or automated system were tricked into launching a
specially crafted container image, a remote attacker could change
permissions on files on the host filesystem and possibly escalate
privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 21.04

• containerd - 1.5.2-0ubuntu1~21.04.2

Ubuntu 20.10

• containerd - 1.5.2-0ubuntu1~20.10.2

Ubuntu 20.04

• containerd - 1.5.2-0ubuntu1~20.04.2

Ubuntu 18.04

• containerd - 1.5.2-0ubuntu1~18.04.2

After a standard system update you need to restart containerd to make
all the necessary changes.

References

• CVE-2021-32760

Related notices

• USN-5521-1: containerd, golang-github-docker-containerd-dev