Security update for containerd
This update for containerd rebuilds it against the current go 1.25 security release.
- Update to 1.7.29-150000.132.1
Published Updated
PatchFirst · Latest vulnerabilities
containerd vulnerabilities
Vulnerabilities published for containerd in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 15
Security update for containerd
This update for containerd rebuilds it against the current go 1.25 security release.
- Update to 1.7.29-150000.130.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: - Update to containerd v1.7.29 - CVE-2024-25621: Fixed an overly broad default permission vulnerability. (bsc#1253126) - CVE-2025-64329: Fixed a goroutine leaks which can lead to memory exhaustion on the host. (bsc#1253132)
- Update to 1.7.29-150000.128.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: - CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749) Other fixes: - Update to containerd v1.7.27.
- Update to 1.7.27-150000.123.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070) - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. (bsc#1228553)
- Update to 1.7.21-150000.117.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: Update to containerd v1.7.17. - CVE-2023-45288: Fixed the limit of CONTINUATION frames read for an HTTP/2 request (bsc#1221400). - Fixed /sys/devices/virtual/powercap accessibility by default containers to mitigate power-based side channel attacks (bsc#1224323).
- Update to 1.7.17-150000.111.3
Published UpdatedSecurity update for catatonit, containerd, runc
This update of runc and containerd fixes the following issues: containerd: - Update to containerd v1.7.8. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.8 * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528) catatonit: - Update to catatonit v0.2.0. * Change license to GPL-2.0-or-later. - Update to catatont v0.1.7 * This release adds the ability for catatonit to be used as the only process in a pause container, by passing the -P flag (in this mode no subprocess is spawned and thus no signal forwarding is done). - Update to catatonit v0.1.6, which fixes a few bugs -- mainly
- Update to 1.7.8-150000.103.1
Published UpdatedSecurity update for containerd
This update of containerd fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475).
- Update to 1.6.21-150000.95.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: - Rebuild containerd with a current version of go to catch up on bugfixes and security fixes (bsc#1210298)
- Update to 1.6.19-150000.90.3
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: Update to containerd v1.6.19: Security fixes: - CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423). - CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426).
- Update to 1.6.19-150000.87.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: - CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - Re-build containerd to use updated golang-packaging (jsc#1342). - Update to containerd v1.6.16 for Docker v23.0.0-ce. * https://github.com/containerd/containerd/releases/tag/v1.6.16
- Update to 1.6.16-150000.82.2
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). Also includes the following fix: - CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
- Update to 1.6.12-150000.79.1
Published UpdatedSecurity update for containerd, docker and runc
This update for containerd, docker and runc fixes the following issues: containerd: - CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145) docker: - Update to Docker 20.10.17-ce. See upstream changelog online at https://docs.docker.com/engine/release-notes/#201017. (bsc#1200145) runc: Update to runc v1.1.3. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.3. * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on s390 and s390x. This solves the issue where syscalls the host kernel did not support would return `-EPERM` despite the
- Update to 1.6.6-150000.73.2
Published UpdatedSecurity update for containerd, docker
This update for containerd, docker fixes the following issues: - CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517). - CVE-2022-23648: Fixed directory traversal issue (bsc#1196441). - CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284). - CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).
- Update to 1.5.11-150000.68.1
Published UpdatedSecurity update for containerd
This update for containerd fixes the following issues: - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host (bsc#1196441).
- Update to 1.4.12-63.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.