PatchFirst · Vulnerabilidades recientes
Vulnerabilidad publicada para containerd en los últimos 30 días: 1. En el catálogo KEV: 0.
Vulnerabilidades: 8
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
This update for containerd rebuilds it against the current go security release.
This update for containerd rebuilds it against the current go security release.
This update for containerd rebuilds it against the current go security release.
This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265794). - CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262948). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266640).
This update for containerd rebuilds it against the current go 1.25 security release.
This update for containerd rebuilds it against the current go 1.25 security release.
This update for containerd fixes the following issues: - Update to containerd v1.7.29 - CVE-2024-25621: Fixed an overly broad default permission vulnerability. (bsc#1253126) - CVE-2025-64329: Fixed a goroutine leaks which can lead to memory exhaustion on the host. (bsc#1253132)
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.