p PatchFirst

SUSE-SU-2023:1827-1

SUSE-SU-2023:1827-1 · Security update for containerd

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for containerd fixes the following issues: Update to containerd v1.6.19: Security fixes: - CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423). - CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426).

Fix available

Published
Updated

Stack: system · containers

Affected products and versions

  • containerd SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

  • containerd SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

  • containerd SUSE:Linux Enterprise Module for Containers 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

  • containerd SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

  • containerd SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

  • containerd openSUSE:Leap Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

  • containerd openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 1.6.19-150000.87.1

    Update to 1.6.19-150000.87.1

Original sources

Check your server →