SUSE-SU-2026:4923-1
SUSE-SU-2026:4923-1 · Security update for containerd
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). - CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). - CVE-2026-53493: a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability (bsc#1282669). - CVE-2026-53495: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service (bsc#1280007). - CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285124).
Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
containerd SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
- Affected ranges
- ECOSYSTEM: < 1.7.29-16.119.1
Update to 1.7.29-16.119.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264923-1/
- https://bugzilla.suse.com/1268441
- https://bugzilla.suse.com/1274214
- https://bugzilla.suse.com/1280007
- https://bugzilla.suse.com/1282669
- https://bugzilla.suse.com/1285124
- https://www.suse.com/security/cve/CVE-2026-39882
- https://www.suse.com/security/cve/CVE-2026-47262
- https://www.suse.com/security/cve/CVE-2026-53493
- https://www.suse.com/security/cve/CVE-2026-53495
- https://www.suse.com/security/cve/CVE-2026-95838
- https://osv.dev/vulnerability/SUSE-SU-2026:4923-1