SUSE-SU-2025:1565-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: - CVE-2025-22247: Fixed Insecure file handling bsc1243106 Other fixes: - Fixed GCC 15 compile time error bsc1241938 - Fix building with containerd 1.7.25+ bsc1237147 Full changelog:...

CBL Mariner 2.0 Security Update: containerd / containerd2 / moby-containerd / moby-containerd-cc (CVE-2024-40635)

The version of containerd / containerd2 / moby-containerd / moby-containerd-cc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40635 advisory. - containerd is an open-source container runtime. A b...

Azure Linux 3.0 Security Update: containerd / containerd2 / moby-containerd / moby-containerd-cc (CVE-2024-40635)

The version of containerd / containerd2 / moby-containerd / moby-containerd-cc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40635 advisory. - containerd is an open-source container runtime. A b...

CVE-2024-40635 affecting package containerd for versions less than 1.7.13-8

CVE-2024-40635 affecting package containerd for versions less than 1.7.13-8. A patched version of the package is available...

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2024-40635 affecting package moby-containerd for versions less than 1.6.26-11

CVE-2024-40635 affecting package moby-containerd for versions less than 1.6.26-11. A patched version of the package is available...

containerd has an integer overflow in User ID handling

...

Debian: Security Advisory (DLA-4153-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the containerd execution environment, related to integer overflows, allows a attacker to execute arbitrary code.

The vulnerability of the containerd execution environment is related to integer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code...

[SECURITY] [DLA 4153-1] containerd security update

Debian LTS Advisory DLA-4153-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson May 04, 2025 https://wiki.debian.org/LTS Package : containerd Version : 1.4.13ds1-1deb11u5 CVE ID : CVE-2024-40635 Debian Bug : 1100806 containerd is a container runtime. A bug was...

DLA-4153-1 containerd - security update

Bulletin has no description...

Debian dla-4153 : containerd - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4153 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4153-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an interger overflow in containerd [CVE-2024-40635]

Summary IBM Watson Speech Services Cartridge is vulnerable to an interger overflow in 'containerd', due to a flaw that allows containers launched with UID:GID larger than the maximum 32-bit signed integer,to cause a potential overflow condition CVE-2024-40635. Containerd is included as part of IB...

Amazon Linux 2 : containerd (ALASECS-2025-053)

The version of containerd installed on the remote host is prior to 1.7.27-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-053 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support...

Security update for containerd

This update for containerd fixes the following issues: Updated containerd to v1.7.27. CVE-2024-40635: Fixed integer overflow in User ID handling bsc1239749. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:20216-1 Security update for containerd

This update for containerd fixes the following issues: - Updated containerd to v1.7.27. - CVE-2024-40635: Fixed integer overflow in User ID handling bsc1239749...

Medium: containerd

Issue Overview: Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...