Fedora 45 : containerd (2026-dc2cbc1bc8)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dc2cbc1bc8 advisory. Automatic update for containerd-2.3.2-1.fc45. Changelog Fri Jun 26 2026 Bradley G Smith - 2.3.2-1 - Update to release v2.3.2 - Resolves: rhbz2464270...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, kine, cloud-provider-aws, mattermost-fips, kubernetes-fips, kyverno-fips, snyk-cli, flux-fips, frankenphp-8.2, traefik, minio-fips, osv-scanner, etcd, kubescape, nemo, harbor-fips, flux-image-automation-controller-fips,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, kine, cloud-provider-aws, mattermost-fips, kubernetes-fips, kyverno-fips, snyk-cli, frankenphp-8.2, traefik, etcd, nemo, docker-cli-buildx, harbor-fips, teleport-operator-fips, gitlab-rails-ce-fips, kube-state-metrics, cilium,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, kyverno, terraform-fips, chezmoi, consul, prometheus-mongodb-exporter, go-discover-fips, cloud-provider-aws, kine, mattermost-fips, kubernetes-fips, kyverno-fips, melange, snyk-cli, flux-fips, frankenphp-8.2, caddy, juicefs, traefik, osv-scanner,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, kyverno, terraform-fips, chezmoi, prometheus-mongodb-exporter, kine, cloud-provider-aws, mattermost-fips, kubernetes-fips, kyverno-fips, longhorn-cli-fips, melange, snyk-cli, buildkitd, flux-fips, frankenphp-8.2, traefik, juicefs, minio-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitea, argocd-image-updater, trivy-operator, mattermost, kaf, cilium-cli, kots, chisel, kubernetes, loki, skaffold, kubernetes-dashboard, k9s, external-dns, rancher-agent, telegraf, trivy, containerd, zarf, cloud-provider-aws, fscrypt, kine, flux, nerdctl,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitea, docker, crossplane-provider-azure-storage, cilium-cli, k9s, tekton-chains, telegraf, wolfictl, atlantis, age, buildkitd, flux-source-controller, dagger, sops, minio, wal-g, scorecard, cilium, spire-server, gitlab-runner, helm, docker-cli-buildx,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitea, opentofu, pulumi-language-dotnet, apko, argocd-image-updater, nfpm, trivy-operator, guac, gomplate, mattermost, kaf, argo-events, cilium-cli, kots, kubernetes, act, loki, argo-cd, podman, skaffold, kubernetes-dashboard, external-dns, k9s, splunk-otel-collector...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: gitea, cilium-cli, k9s, wolfictl, telegraf, flux-source-controller, dagger, minio, scorecard, cilium, spire-server, helm, docker-cli-buildx, terragrunt, witness, rancher, k3s, grype, kaf, apko, nfpm, step-issuer, mattermost, argo-events, external-dns, containerd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitea, argocd-image-updater, trivy-operator, mattermost, kaf, cilium-cli, kots, chisel, kubernetes, loki, skaffold, kubernetes-dashboard, external-dns, k9s, rancher-agent, telegraf, trivy, containerd, zarf, cloud-provider-aws, fscrypt, kine, flux, nerdctl,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: buildah, mattermost, cilium-cli, kots, loki, kubernetes, podman, kubernetes-dashboard, external-dns, rancher-agent, telegraf, containerd, cloud-provider-aws, fscrypt, kine, flux, nerdctl, minio, prometheus-operator, opentelemetry-collector, cilium, prometheus,...

OPENSUSE-SU-2026:21072-1 Security update for trivy

This update for trivy fixes the following issues Update to version 0.71.2: - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption bsc1267268. - CVE-2026-46680:...

Security update for containerd

This update for containerd fixes the following issues CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260296. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZ...

ROS-20260626-73-0016

The vulnerability in containerd is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:2639-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2639-1 advisory. This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization...

SUSE SLES12 Security Update : containerd (SUSE-SU-2026:2640-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2640-1 advisory. This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : containerd vulnerabilities (USN-8471-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8471-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attack...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : containerd vulnerabilities (USN-8472-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8472-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could possibl...

Ubuntu 25.10 / 26.04 LTS : containerd-stable vulnerabilities (USN-8473-1)

The remote Ubuntu 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8473-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could possibly use this issue to cause containerd...

GO-2026-5758 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

containerd CRI — image-config LABEL flows to restart-monitor binary:// logger: host-root command execution from an image pull in github.com/containerd/containerd...