Security update for containerd

This update for containerd fixes the following issues: Update to containerd v1.7.21. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.21 Fixes CVE-2023-47108. bsc1217070 Fixes CVE-2023-45142. bsc1228553 Update to containerd v1.7.17. Upstream release notes:...

SUSE-SU-2025:20091-1 Security update for containerd

This update for containerd fixes the following issues: - Update to containerd v1.7.21. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.21 Fixes CVE-2023-47108. bsc1217070 Fixes CVE-2023-45142. bsc1228553 - Update to containerd v1.7.17. Upstream release notes:...

CVE-2024-45338 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, kubernetes-replicator, victoriametrics-operator, cluster-proportional-autoscaler-fips, tkn-fips, spicedb, rootlesskit, karpenter-fips, postgres-operator, flux-notification-controller, spire-server, minio, eks-distro, sftpgo-plugin-pubsub, stern,...

CVE-2024-45338

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-8

CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-8. A patched version of the package is available...

CVE-2024-24786 affecting package moby-containerd for versions less than 1.6.26-8

CVE-2024-24786 affecting package moby-containerd for versions less than 1.6.26-8. A patched version of the package is available...

Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-032)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-032 advisory. A bug was found in containerd where containers launched through containerd's CRI implementation with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and...

CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5

CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5. A patched version of the package is available...

CVE-2024-24786 affecting package containerd for versions less than 1.7.13-5

CVE-2024-24786 affecting package containerd for versions less than 1.7.13-5. A patched version of the package is available...

Fedora 37 : containerd / golang-github-containerd-cgroups / moby-engine (2022-7e327a20be)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-7e327a20be advisory. golang-github-containerd-cgroups Fix bodhi bug of making epoch version obsolete containerd Update to 1.6.14 rhbz2154183 Tenable has extracted the...

Fedora 37 : golang-github-containerd-imgcrypt (2022-cfe50b5ebb)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cfe50b5ebb advisory. Automatic update for golang-github-containerd-imgcrypt-1.1.4-1.fc37. Changelog Sat Apr 2 2022 Maxwell G 1.1.4-1 - Update to 1.1.4 rhbz2068719...

Fedora 36 : containerd (2022-6f630b1ba7)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6f630b1ba7 advisory. Automatic update for containerd-1.5.9-1.fc36. Changelog Mon Jan 31 2022 Maxwell G - 1.5.9-1 - Update to 1.5.9. Fixes FTBFS. Closes rhbz2045277. -...

Fedora 37 : cadvisor / containerd / golang-github-cloudflare-redoctober / etc (2022-cd92e4cc43)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-cd92e4cc43 advisory. Rebuild to mitigate CVE-2022-21698 rhbz2067400. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Spoofing Attack

github.com/containerd/containerd is vulnerable to Spoofing Attack. The vulnerability is due to the lack of a definitive specification for manifest and index documents in the OCI Distribution and Image Specifications, allows different interpretations based on the Content-Type header...

K000141393: Containerd vulnerability CVE-2021-41103

Security Advisory Description containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux...

SUSE SLES15 / openSUSE 15 Security Update : containerd (SUSE-SU-2024:3221-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3221-1 advisory. - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumptio...

openSUSE Security Advisory (SUSE-SU-2024:3221-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3221-1 Security update for containerd

This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumption due to unbound cardinality metrics. bsc1217070 - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. bsc1228553...

SUSE: Security Advisory (SUSE-SU-2024:3221-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : containerd (SUSE-SU-2024:3188-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3188-1 advisory. - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc uncontrolled resource consumption due to unbou...