CVE-2021-29133: 
Linux openSUSE vulnerability analysis and mitigation

CVE-2021-29133 is a security vulnerability discovered in haserl, a component of Alpine Linux Configuration Framework. The vulnerability affects versions before 0.9.36 and was disclosed on March 24, 2021. The issue allows local users to read the contents of any file on the filesystem due to a lack of proper verification in the haserl component (Alpine Issue).

The vulnerability exists in the setuid haserl-lua binary component of Alpine Linux. The issue specifically affects the haserl-lua5.1 executable when it has setuid permissions, allowing unprivileged users to read arbitrary files on the system without requiring specific privileges (Rapid7 Blog).

The vulnerability allows local users to read any file on the filesystem without requiring specific privileges. This can lead to exposure of sensitive information, including system files and configuration data that should normally be restricted (CVE Mitre).

The vulnerability has been fixed in haserl version 0.9.36. Users should upgrade to this version or later to mitigate the risk. The fix has been backported to multiple Alpine Linux branches including 3.13-stable, 3.12-stable, 3.11-stable, and 3.10-stable (Alpine Issue).