SUSE-SU-2024:3221-1
Security update for containerd
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070) - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. (bsc#1228553)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap Micro 5.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd, containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd, containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.1 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.4 | containerd | 1.7.21-150000.117.1 |
Mostrar las 25 entradas de 13 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.5 | containerd | 1.7.21-150000.117.1 |
| openSUSE Leap 15.5 | containerd-ctr | 1.7.21-150000.117.1 |
| openSUSE Leap 15.5 | containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd-ctr | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap Micro 5.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.1 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.4 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.5 | containerd | 1.7.21-150000.117.1 |
Referencias
- https://bugzilla.suse.com/1200528
- https://bugzilla.suse.com/1217070
- https://bugzilla.suse.com/1228553
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019420.html
- https://www.suse.com/security/cve/CVE-2022-1996/
- https://www.suse.com/security/cve/CVE-2023-45142/
- https://www.suse.com/security/cve/CVE-2023-47108/
- https://www.suse.com/support/security/rating/