USN-4881-1: containerd vulnerability

Releases

• Ubuntu 20.10
• Ubuntu 20.04 LTS

Packages

• containerd - daemon to control runC

Details

It was discovered that containerd incorrectly handled certain environment
variables. Contrary to expectations, a container could receive environment
variables defined for a different container, possibly containing sensitive
information.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.10

• containerd - 1.3.7-0ubuntu3.3

Ubuntu 20.04

• containerd - 1.3.3-0ubuntu2.3

After a standard system update you need to restart containerd to make
all the necessary changes.

References

• CVE-2021-21334