SUSE-SU-2026:24381-1
SUSE-SU-2026:24381-1 · Security update for containerd
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). - CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). - CVE-2026-53493: a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability (bsc#1282669). - CVE-2026-53495: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service (bsc#1280007). - CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285124).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system · containers
Produits et versions concernés
containerd SUSE:Linux Micro 6.1
- Plages de versions concernées
- ECOSYSTEM: < 1.7.29-slfo.1.1_5.1
Mettez à jour vers 1.7.29-slfo.1.1_5.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-202624381-1/
- https://bugzilla.suse.com/1268430
- https://bugzilla.suse.com/1268441
- https://bugzilla.suse.com/1274214
- https://bugzilla.suse.com/1280007
- https://bugzilla.suse.com/1282669
- https://bugzilla.suse.com/1285124
- https://www.suse.com/security/cve/CVE-2026-39882
- https://www.suse.com/security/cve/CVE-2026-47262
- https://www.suse.com/security/cve/CVE-2026-53488
- https://www.suse.com/security/cve/CVE-2026-53493
- https://www.suse.com/security/cve/CVE-2026-53495
- https://www.suse.com/security/cve/CVE-2026-95838
- https://osv.dev/vulnerability/SUSE-SU-2026:24381-1