Security Bulletin: A vulnerability in containerd affects Data Replication on Cloud Pak for Data

Summary A vulnerability in the containerd package has been addressed. Vulnerability Details CVEID:CVE-2022-31030 DESCRIPTION: containerd is vulnerable to a denial of service, caused by a flaw in the CRI implementation. By sending a specially-crafted request using the ExecSync API, a local...

Security Bulletin: A vulnerability in containerd affects Data Replication on Cloud Pak for Data

Summary A vulnerability in the containerd package has been addressed. Vulnerability Details CVEID:CVE-2022-23471 DESCRIPTION: containerd is vulnerable to a denial of service, caused by a flaw in the CRI implementation. By sending a specially-crafted request, a remote authenticated attacker could...

OPENSUSE-SU-2024:14081-1 containerd-1.7.17-2.1 on GA media

These are all security issues fixed in the containerd-1.7.17-2.1 package on the GA media of openSUSE Tumbleweed...

Important: containerd

Issue Overview: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CVE-2023-39325 A malicious HTTP sender can use chunk extensions to cause a receiver...

SUSE: Security Advisory (SUSE-SU-2024:2108-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : containerd (SUSE-SU-2024:2108-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2108-1 advisory. Update to containerd v1.7.17. - CVE-2023-45288: Fixed the limit of CONTINUATION frames read for an HTTP/2 request bsc1221400. ...

SUSE-SU-2024:2108-1 Security update for containerd

This update for containerd fixes the following issues: Update to containerd v1.7.17. - CVE-2023-45288: Fixed the limit of CONTINUATION frames read for an HTTP/2 request bsc1221400. - Fixed /sys/devices/virtual/powercap accessibility by default containers to mitigate power-based side channel attac...

OPENSUSE-SU-2024:12558-1 containerd-1.6.12-1.1 on GA media

These are all security issues fixed in the containerd-1.6.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11565-1 containerd-1.4.11-1.1 on GA media

These are all security issues fixed in the containerd-1.4.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13989-1 containerd-1.7.17-1.1 on GA media

These are all security issues fixed in the containerd-1.7.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12550-1 containerd-1.6.9-1.1 on GA media

These are all security issues fixed in the containerd-1.6.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11646-1 containerd-1.4.12-1.1 on GA media

These are all security issues fixed in the containerd-1.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11891-1 containerd-1.4.13-1.1 on GA media

These are all security issues fixed in the containerd-1.4.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12001-1 containerd-1.5.11-1.1 on GA media

These are all security issues fixed in the containerd-1.5.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12130-1 containerd-1.6.6-1.1 on GA media

These are all security issues fixed in the containerd-1.6.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10693-1 containerd-1.4.8-2.2 on GA media

These are all security issues fixed in the containerd-1.4.8-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12822-1 containerd-1.6.19-1.1 on GA media

These are all security issues fixed in the containerd-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-45288 affecting package moby-containerd-cc for versions less than 1.7.7-4

CVE-2023-45288 affecting package moby-containerd-cc for versions less than 1.7.7-4. A patched version of the package is available...

CVE-2023-45288 affecting package moby-containerd for versions less than 1.6.26-5

CVE-2023-45288 affecting package moby-containerd for versions less than 1.6.26-5. A patched version of the package is available...

GO-2024-2846 Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd...