SUSE-SU-2024:3221-1
Security update for containerd
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070) - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. (bsc#1228553)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.5 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap Micro 5.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd, containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd, containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.1 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.4 | containerd | 1.7.21-150000.117.1 |
Alle 25 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.5 | containerd | 1.7.21-150000.117.1 |
| openSUSE Leap 15.5 | containerd-ctr | 1.7.21-150000.117.1 |
| openSUSE Leap 15.5 | containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd-ctr | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap Micro 5.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.1 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.4 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.5 | containerd | 1.7.21-150000.117.1 |
Referenzen
- https://bugzilla.suse.com/1200528
- https://bugzilla.suse.com/1217070
- https://bugzilla.suse.com/1228553
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019420.html
- https://www.suse.com/security/cve/CVE-2022-1996/
- https://www.suse.com/security/cve/CVE-2023-45142/
- https://www.suse.com/security/cve/CVE-2023-47108/
- https://www.suse.com/support/security/rating/