kritik
CVE-2026-53492
github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
GHSA8.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N
Red Hat8.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: GHSA (yüksek), Red Hat (yüksek), Amazon (yüksek), Ubuntu (yüksek), Azure Linux (orta), Bottlerocket (orta).
Açıklama
containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into the restored container. Successful exploitation requires that the node has CDI enabled and contains a matching host CDI specification for the requested device; environments where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.24 | containerd | 2.3.2-r0 |
| alpine edge | containerd | 2.3.2-r0 |
| amazon linux 2023 | containerd, containerd-debuginfo, containerd-debugsource ve 2 tane daha | 2.2.4-1.amzn2023.0.3 |
| Azure Linux 3.0 | containerd2 | 0:2.2.4-3.azl3 |
| bottlerocket | bottlerocket-containerd-2.1, bottlerocket-containerd-2.2, containerd-2.1 ve 1 tane daha | 2.1.8-1.1781747852.5f13b929.br1 ve 1 tane daha |
| chainguard | amazon-ecs-agent, amazon-ecs-agent-fips, beats-7 ve 211 tane daha | 1.105.0-r0 ve 180 tane daha |
| debian 14 | containerd | 2.1.9+ds1-1 |
| echo | rancher-2.13, rancher-2.14 | 2.13.9+e5 ve 1 tane daha |
| go::GitHub Security Advisory Go | github.com/containerd/containerd/v2 | 2.1.9, 2.2.5, 2.3.2 |
| minimos | buildkitd, buildkitd-fips, buildpacks-lifecycle-0.20 ve 85 tane daha | 0.31.0-r2 ve 62 tane daha |
| rapidfort amazon linux 2023 | containerd, containerd-stress | 2.2.4-1.amzn2023.0.3 |
| rapidfort debian 12 | containerd | 0:2.1.9+ds1-1 |
26 kaynaktaki 423 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.24 | containerd | 2.3.2-r0 |
| alpine edge | containerd | 2.3.2-r0 |
| amazon linux 2023 | containerd | 2.2.4-1.amzn2023.0.3 |
| amazon linux 2023 | containerd-debuginfo | 2.2.4-1.amzn2023.0.3 |
| amazon linux 2023 | containerd-debugsource | 2.2.4-1.amzn2023.0.3 |
| amazon linux 2023 | containerd-stress | 2.2.4-1.amzn2023.0.3 |
| amazon linux 2023 | containerd-stress-debuginfo | 2.2.4-1.amzn2023.0.3 |
| Azure Linux 3.0 | containerd2 | 0:2.2.4-3.azl3 |
| bottlerocket | bottlerocket-containerd-2.1 | 2.1.8-1.1781747852.5f13b929.br1 |
| bottlerocket | bottlerocket-containerd-2.2 | 2.2.4-1.1781747852.5f13b929.br1 |
| bottlerocket | containerd-2.1 | 2.1.8-1.1781747852.5f13b929.br1 |
| bottlerocket | containerd-2.2 | 2.2.4-1.1781747852.5f13b929.br1 |
| chainguard | amazon-ecs-agent | 1.105.0-r0 |
| chainguard | amazon-ecs-agent-fips | 1.105.0-r0 |
| chainguard | beats-7 | 7.17.29-r18 |
| chainguard | beats-fips-7 | 7.17.29-r20 |
| chainguard | buildkitd | 0.31.0-r2 |
| chainguard | buildkitd-fips | 0.31.0-r1 |
| chainguard | cg | 0.2.295-r2 |
| chainguard | chainctl | 0.2.289-r1 |
| chainguard | chainctl-fips | 0.2.289-r1 |
| chainguard | chaos-mesh | 2.8.3-r3 |
| chainguard | chaos-mesh-fips | 2.8.3-r2 |
| chainguard | chartmuseum | 0.16.5-r15 |
| chainguard | chartmuseum-fips | 0.16.5-r15 |
| chainguard | cloudbeat-8.17 | 8.17.10-r27 |
| chainguard | cloudbeat-8.19 | 8.19.16-r2 |
| chainguard | cloudbeat-9.0 | 9.0.8-r28 |
| chainguard | cloudbeat-9.1 | 9.1.10-r20 |
| chainguard | cloudbeat-9.2 | 9.2.8-r8 |
| chainguard | cloudbeat-9.3 | 9.3.5-r2 |
| chainguard | cloudbeat-9.4 | 9.4.2-r2 |
| chainguard | cloudbeat-fips-8.17 | 8.17.10-r32 |
| chainguard | cloudbeat-fips-8.19 | 8.19.16-r1 |
| chainguard | cloudbeat-fips-9.0 | 9.0.8-r31 |
| chainguard | cloudbeat-fips-9.1 | 9.1.10-r24 |
| chainguard | cloudbeat-fips-9.2 | 9.2.8-r7 |
| chainguard | cloudbeat-fips-9.3 | 9.3.5-r2 |
| chainguard | cloudbeat-fips-9.4 | 9.4.2-r4 |
| chainguard | cluster-api-helm-controller | 0.6.4-r8 |
| chainguard | cluster-api-helm-controller-fips | 0.6.4-r7 |
| chainguard | consul-k8s-1.1 | 1.1.18-r40 |
| chainguard | consul-k8s-1.3 | 1.3.9-r47 |
| chainguard | consul-k8s-1.4 | 1.4.10-r32 |
| chainguard | consul-k8s-1.5 | 1.5.9-r30 |
| chainguard | consul-k8s-1.6 | 1.6.10-r24 |
| chainguard | consul-k8s-1.7 | 1.7.13-r14 |
| chainguard | consul-k8s-1.9 | 1.9.9-r0 |
| chainguard | consul-k8s-2.0 | 2.0.1-r2 |
| chainguard | consul-k8s-fips-1.1 | 1.1.18-r40 |
| chainguard | consul-k8s-fips-1.3 | 1.3.9-r43 |
| chainguard | consul-k8s-fips-1.4 | 1.4.10-r31 |
| chainguard | consul-k8s-fips-1.5 | 1.5.9-r32 |
| chainguard | consul-k8s-fips-1.6 | 1.6.10-r25 |
| chainguard | consul-k8s-fips-1.7 | 1.7.13-r17 |
| chainguard | consul-k8s-fips-1.9 | 1.9.9-r1 |
| chainguard | consul-k8s-fips-2.0 | 2.0.1-r2 |
| chainguard | containerd-1 | 1.7.33-r1 |
| chainguard | crossplane-2.3 | 2.3.3-r4 |
| chainguard | crossplane-fips-2.3 | 2.3.3-r1 |
| chainguard | ctop | 0.7.7-r38 |
| chainguard | dagger | 0.20.8-r9 |
| chainguard | datadog-agent-7.71 | 7.71.2-r27 |
| chainguard | datadog-agent-7.72 | 7.72.4-r30 |
| chainguard | datadog-agent-7.73 | 7.73.3-r19 |
| chainguard | datadog-agent-7.74 | 7.74.1-r21 |
| chainguard | datadog-agent-7.75 | 7.75.4-r9 |
| chainguard | datadog-agent-7.76 | 7.76.3-r41 |
| chainguard | datadog-agent-7.77 | 7.77.3-r18 |
| chainguard | datadog-agent-7.78 | 7.78.4-r12 |
| chainguard | datadog-agent-7.79 | 7.79.2-r8 |
| chainguard | datadog-agent-fips-7.71 | 7.71.2-r20 |
| chainguard | datadog-agent-fips-7.72 | 7.72.4-r22 |
| chainguard | datadog-agent-fips-7.73 | 7.73.3-r23 |
| chainguard | datadog-agent-fips-7.74 | 7.74.1-r22 |
| chainguard | datadog-agent-fips-7.75 | 7.75.4-r9 |
| chainguard | datadog-agent-fips-7.76 | 7.76.3-r27 |
| chainguard | datadog-agent-fips-7.77 | 7.77.3-r20 |
| chainguard | datadog-agent-fips-7.78 | 7.78.4-r10 |
| chainguard | datadog-agent-fips-7.79 | 7.79.2-r3 |
| chainguard | docker-29 | 29.6.0-r1 |
| chainguard | docker-cli-buildx | 0.35.0-r1 |
| chainguard | docker-cli-buildx-fips | 0.35.0-r1 |
| chainguard | docker-compose | 5.1.4-r6 |
| chainguard | docker-compose-fips | 5.1.4-r5 |
| chainguard | docker-fips-29 | 29.5.2-r4 |
| chainguard | eksctl | 0.229.0-r1 |
| chainguard | envoy-gateway | 1.8.2-r0 |
| chainguard | envoy-gateway-1.8 | 1.8.3-r0 |
| chainguard | envoy-gateway-fips | 1.8.2-r0 |
| chainguard | envoy-gateway-fips-1.8 | 1.8.3-r0 |
| chainguard | falco-no-driver | 0.45.0-r0 |
| chainguard | fuse-overlayfs-snapshotter | 2.1.7-r17 |
| chainguard | gatekeeper-3.20 | 3.20.1-r12 |
| chainguard | gatekeeper-3.21 | 3.21.1-r14 |
| chainguard | gitlab-rails-ce-18.1 | 18.1.6-r13 |
| chainguard | gitlab-rails-ce-18.10 | 18.10.8-r2 |
| chainguard | gitlab-rails-ce-18.11 | 18.11.6-r3 |
| chainguard | gitlab-rails-ce-18.5 | 18.5.7-r1 |
| chainguard | gitlab-rails-ce-18.6 | 18.6.8-r2 |
| chainguard | gitlab-rails-ce-18.7 | 18.7.7-r2 |
| chainguard | gitlab-rails-ce-18.8 | 18.8.11-r1 |
| chainguard | gitlab-rails-ce-18.9 | 18.9.8-r3 |
| chainguard | gitlab-rails-ce-19.0 | 19.0.3-r3 |
| chainguard | gitlab-rails-ce-19.1 | 19.1.1-r4 |
| chainguard | gitlab-rails-ce-fips-18.1 | 18.1.6-r16 |
| chainguard | gitlab-rails-ce-fips-18.10 | 18.10.8-r3 |
| chainguard | gitlab-rails-ce-fips-18.11 | 18.11.6-r2 |
| chainguard | gitlab-rails-ce-fips-18.5 | 18.5.7-r1 |
| chainguard | gitlab-rails-ce-fips-18.6 | 18.6.8-r2 |
| chainguard | gitlab-rails-ce-fips-18.7 | 18.7.7-r2 |
| chainguard | gitlab-rails-ce-fips-18.8 | 18.8.11-r1 |
| chainguard | gitlab-rails-ce-fips-18.9 | 18.9.8-r1 |
| chainguard | gitlab-rails-ce-fips-19.0 | 19.0.3-r2 |
| chainguard | gitlab-rails-ce-fips-19.1 | 19.1.1-r2 |
| chainguard | google-osconfig-agent | 20251028.00-r24 |
| chainguard | grype | 0.114.0-r1 |
| chainguard | grype-db | 0.54.0-r1 |
| chainguard | grype-fips | 0.114.0-r1 |
| chainguard | harvester | 1.8.1-r1 |
| chainguard | harvester-fips | 1.8.1-r0 |
| chainguard | headlamp | 0.43.0-r3 |
| chainguard | headlamp-fips | 0.43.0-r4 |
| chainguard | helm-3 | 3.22.0-r0 |
| chainguard | helm-exporter | 1.3.0-r13 |
| chainguard | helm-exporter-fips | 1.3.0-r14 |
| chainguard | helm-fips-3 | 3.21.2-r2 |
| chainguard | helm-mapkubeapis | 0.6.1-r21 |
| chainguard | helm-operator | 1.42.3-r0 |
| chainguard | helm-operator-fips | 1.42.3-r2 |
| chainguard | helm-push | 0.11.1-r16 |
| chainguard | helm-set-status | 0.3.0-r21 |
| chainguard | helmfile | 1.6.0-r2 |
| chainguard | jfrog-cli | 2.112.0-r0 |
| chainguard | k3s | 1.36.2.1-r1 |
| chainguard | k3s-1.34 | 1.34.9.1-r1 |
| chainguard | k3s-1.35 | 1.35.6.1-r1 |
| chainguard | k8sgpt | 0.4.38-r3 |
| chainguard | k8ssandra-client | 0.9.1-r2 |
| chainguard | k9s | 0.51.0-r1 |
| chainguard | k9s-fips | 0.51.0-r1 |
| chainguard | kaniko | 1.25.15-r9 |
| chainguard | kaniko-fips | 1.25.15-r7 |
| chainguard | kargo | 1.10.8-r1 |
| chainguard | kargo-1.10 | 0 |
| chainguard | kargo-1.11 | 0 |
| chainguard | kargo-1.8 | 0 |
| chainguard | kargo-1.9 | 0 |
| chainguard | kgateway-2.3 | 2.3.5-r3 |
| chainguard | kgateway-fips-2.3 | 2.3.5-r1 |
| chainguard | kots | 1.130.6-r0 |
| chainguard | kube-arangodb-1.3 | 1.3.4-r9 |
| chainguard | kube-arangodb-1.4 | 1.4.3-r14 |
| chainguard | kube-arangodb-fips-1.3 | 1.3.4-r8 |
| chainguard | kube-arangodb-fips-1.4 | 1.4.3-r8 |
| chainguard | kube-mgmt | 11.0.7-r4 |
| chainguard | kube-mgmt-fips | 11.0.7-r6 |
| chainguard | kubescape | 4.0.9-r1 |
| chainguard | kubescape-operator | 0.2.172-r2 |
| chainguard | kubescape-operator-fips | 0.2.151-r6 |
| chainguard | kubescape-server | 4.0.9-r2 |
| chainguard | kubescape-server-fips | 4.0.9-r2 |
| chainguard | kubevela | 1.10.9-r0 |
| chainguard | kubevela-fips | 1.10.9-r0 |
| chainguard | linkerd2 | 26.9.2-r0 |
| chainguard | linkerd2-fips | 26.6.3-r4 |
| chainguard | livekit-cli | 2.16.4-r5 |
| chainguard | manifest-tool | 2.2.2-r4 |
| chainguard | neuvector | 5.5.3-r1 |
| chainguard | neuvector-fips | 5.5.3-r1 |
| chainguard | neuvector-scanner | 4.199-r1 |
| chainguard | neuvector-scanner-fips | 4.199-r1 |
| chainguard | newrelic-infrastructure-agent | 1.77.1-r0 |
| chainguard | newrelic-infrastructure-agent-fips | 1.77.1-r1 |
| chainguard | packer | 1.15.4-r2 |
| chainguard | packer-fips | 1.15.4-r2 |
| chainguard | rancher-2.10 | 2.10.12-r1 |
| chainguard | rancher-2.11 | 2.11.15-r0 |
| chainguard | rancher-2.12 | 2.12.11-r1 |
| chainguard | rancher-2.13 | 2.13.7-r0 |
| chainguard | rancher-2.14 | 2.14.3-r1 |
| chainguard | rancher-agent-2.10 | 2.10.12-r1 |
| chainguard | rancher-agent-2.11 | 2.11.15-r0 |
| chainguard | rancher-agent-2.12 | 2.12.11-r0 |
| chainguard | rancher-agent-2.13 | 2.13.9-r4 |
| chainguard | rancher-agent-2.14 | 2.14.3-r0 |
| chainguard | rancher-agent-2.9 | 2.9.12-r15 |
| chainguard | rancher-helm-3 | 3.20.0-r15 |
| chainguard | redpanda-operator | 26.1.7-r0 |
| chainguard | redpanda-operator-25.1 | 25.1.4-r7 |
| chainguard | redpanda-operator-25.2 | 25.2.6-r2 |
| chainguard | redpanda-operator-25.3 | 25.3.7-r3 |
| chainguard | redpanda-operator-26.1 | 26.1.7-r0 |
| chainguard | scorecard | 5.5.0-r10 |
| chainguard | skaffold | 2.23.0-r0 |
| chainguard | skaffold-fips | 2.23.0-r0 |
| chainguard | spegel | 0.7.2-r2 |
| chainguard | spegel-fips | 0.7.2-r1 |
| chainguard | steampipe | 2.4.4-r7 |
| chainguard | syft | 1.45.1-r1 |
| chainguard | syft-fips | 1.45.1-r2 |
| chainguard | tekton-pipelines-0.68 | 0.68.1-r22 |
| chainguard | tekton-pipelines-fips-0.68 | 0.68.1-r24 |
| chainguard | teleport-17 | 17.7.26-r1 |
| chainguard | teleport-18 | 18.9.2-r1 |
| chainguard | teleport-18.6 | 18.6.8-r30 |
| chainguard | tigera-operator-1.40 | 1.40.13-r1 |
| chainguard | tigera-operator-1.41 | 1.41.1-r16 |
| chainguard | tigera-operator-1.42 | 1.42.3-r0 |
| chainguard | tigera-operator-fips-1.40 | 1.40.13-r1 |
| chainguard | tigera-operator-fips-1.41 | 1.41.1-r13 |
| chainguard | tigera-operator-fips-1.42 | 1.42.3-r1 |
| chainguard | trivy | 0.70.0-r7 |
| chainguard | trivy-fips | 0.70.0-r1 |
| chainguard | trivy-operator | 0.30.1-r16 |
| chainguard | trivy-operator-fips | 0.30.1-r13 |
| chainguard | tw | 0.0.50-r0 |
| chainguard | upwind-agent | 0 |
| chainguard | wazuh-manager | 0 |
| chainguard | wazuh-manager-fips | 0 |
| chainguard | wolfictl | 0.39.18-r2 |
| chainguard | xeol | 0.10.8-r47 |
| chainguard | xeol-fips | 0.10.8-r46 |
| chainguard | zarf | 0.79.0-r1 |
| chainguard | zarf-fips | 0.79.0-r2 |
| chainguard | zot | 2.1.17-r7 |
| debian 14 | containerd | 2.1.9+ds1-1 |
| echo | rancher-2.13 | 2.13.9+e5 |
| echo | rancher-2.14 | 2.14.5+e4 |
| go::GitHub Security Advisory Go | github.com/containerd/containerd/v2 | 2.1.9, 2.2.5, 2.3.2 |
| minimos | buildkitd | 0.31.0-r2 |
| minimos | buildkitd-fips | 0.31.0-r2 |
| minimos | buildpacks-lifecycle-0.20 | 0.20.20-r6 |
| minimos | buildpacks-lifecycle-fips-0.20 | 0.20.20-r5 |
| minimos | cloudbeat-8.19 | 8.19.16-r1 |
| minimos | cloudbeat-9.4 | 9.4.3-r0 |
| minimos | clusteradm-fips | 1.4.0-r0 |
| minimos | containerd-2 | 2.3.2-r0 |
| minimos | containerd-fips-2 | 2.3.2-r0 |
| minimos | copa | 0.14.2-r1 |
| minimos | copa-fips | 0.14.2-r1 |
| minimos | datadog-agent-7 | 7.82.0-r0 |
| minimos | docker-29 | 29.6.1-r0 |
| minimos | docker-cli-buildx | 0.35.0-r1 |
| minimos | docker-cli-buildx-fips | 0.35.0-r1 |
| minimos | docker-compose | 5.2.0-r0 |
| minimos | docker-compose-fips | 5.2.0-r0 |
| minimos | docker-fips-29 | 29.6.1-r0 |
| minimos | falco-no-driver | 0.45.0-r0 |
| minimos | flipt-1 | 1.61.1-r4 |
| minimos | flipt-fips-1 | 1.61.1-r3 |
| minimos | grype | 0.115.0-r0 |
| minimos | grype-fips | 0.115.0-r0 |
| minimos | helm | 4.0.0-r0 |
| minimos | helm-3 | 3.21.3-r0 |
| minimos | helm-fips | 4.0.0-r0 |
| minimos | helm-fips-3 | 3.21.3-r0 |
| minimos | k3d | 5.9.0-r0 |
| minimos | k9s | 0.51.0-r1 |
| minimos | k9s-fips | 0.51.0-r1 |
| minimos | kube-mgmt | 11.0.7-r6 |
| minimos | kube-mgmt-fips | 11.0.7-r5 |
| minimos | kubearmor | 1.7.4-r0 |
| minimos | kubearmor-fips | 1.7.4-r0 |
| minimos | kubescape | 4.0.9-r1 |
| minimos | kubescape-downloader | 4.0.9-r1 |
| minimos | kubescape-downloader-fips | 4.0.9-r1 |
| minimos | kubescape-fips | 4.0.9-r1 |
| minimos | kubescape-ksserver | 4.0.9-r1 |
| minimos | kubescape-ksserver-fips | 4.0.9-r1 |
| minimos | livekit-cli | 2.18.1-r0 |
| minimos | livekit-cli-fips | 2.18.1-r0 |
| minimos | opa | 1.17.0-r0 |
| minimos | opa-envoy | 1.17.0-r0 |
| minimos | opa-envoy-fips | 1.17.0-r0 |
| minimos | opa-fips | 1.17.0-r0 |
| minimos | paketo-buildpacks-bundle-install | 0.9.13-r0 |
| minimos | paketo-buildpacks-bundler | 0.9.14-r0 |
| minimos | paketo-buildpacks-conda-env-update | 0.8.29-r0 |
| minimos | paketo-buildpacks-cpython | 1.18.32-r0 |
| minimos | paketo-buildpacks-dotnet-core-aspnet-runtime | 1.6.29-r0 |
| minimos | paketo-buildpacks-dotnet-core-sdk | 1.6.30-r0 |
| minimos | paketo-buildpacks-dotnet-execute | 1.2.31-r0 |
| minimos | paketo-buildpacks-dotnet-publish | 1.3.0-r0 |
| minimos | paketo-buildpacks-go-build | 2.4.29-r0 |
| minimos | paketo-buildpacks-go-build-2.4.20 | 2.4.20-r1 |
| minimos | paketo-buildpacks-go-dist | 2.10.17-r0 |
| minimos | paketo-buildpacks-go-dist-2.10.9 | 2.10.9-r1 |
| minimos | paketo-buildpacks-go-mod-vendor | 1.1.29-r0 |
| minimos | paketo-buildpacks-go-mod-vendor-1.1.21 | 1.1.21-r1 |
| minimos | paketo-buildpacks-httpd | 1.0.10-r0 |
| minimos | paketo-buildpacks-icu | 0.9.30-r0 |
| minimos | paketo-buildpacks-jam | 2.18.0-r0 |
| minimos | paketo-buildpacks-miniconda | 0.11.29-r0 |
| minimos | paketo-buildpacks-mri | 1.1.15-r0 |
| minimos | paketo-buildpacks-nginx | 1.0.32-r0 |
| minimos | paketo-buildpacks-node-engine | 8.2.0-r0 |
| minimos | paketo-buildpacks-npm-install | 2.3.23-r0 |
| minimos | paketo-buildpacks-passenger | 0.14.25-r0 |
| minimos | paketo-buildpacks-pip | 0.26.19-r0 |
| minimos | paketo-buildpacks-pip-install | 0.7.31-r0 |
| minimos | paketo-buildpacks-pipenv | 1.28.6-r0 |
| minimos | paketo-buildpacks-pipenv-install | 0.7.31-r0 |
| minimos | paketo-buildpacks-poetry | 0.17.8-r0 |
| minimos | paketo-buildpacks-poetry-install | 0.6.37-r0 |
| minimos | paketo-buildpacks-python-package-managers-install | 0.15.1-r0 |
| minimos | paketo-buildpacks-python-package-managers-run | 0.5.5-r0 |
| minimos | paketo-buildpacks-vsdbg | 0.6.29-r0 |
| minimos | paketo-buildpacks-yarn | 2.2.36-r0 |
| minimos | paketo-buildpacks-yarn-install | 2.7.18-r0 |
| minimos | syft | 1.46.0-r0 |
| minimos | syft-fips | 1.46.0-r0 |
| minimos | trivy | 0.72.0-r0 |
| minimos | trivy-fips | 0.72.0-r0 |
| minimos | trivy-operator | 0.31.1-r1 |
| minimos | trivy-operator-fips | 0.31.1-r1 |
| minimos | zot | 2.1.17-r1 |
| minimos | zot-fips | 2.1.17-r1 |
| rapidfort amazon linux 2023 | containerd | 2.2.4-1.amzn2023.0.3 |
| rapidfort amazon linux 2023 | containerd-stress | 2.2.4-1.amzn2023.0.3 |
| rapidfort debian 12 | containerd | 0:2.1.9+ds1-1 |
| rapidfort debian 13 | containerd | 0:2.1.9+ds1-1 |
| rapidfort fedora 43 | containerd | 2.2.5-1.fc43 |
| rapidfort fedora 43 | docker-buildkit | 0.33.0-1.fc43 |
| rapidfort fedora 43 | docker-buildx | 0.37.0-1.fc43 |
| rapidfort fedora 43 | docker-compose | 5.3.0-1.fc43 |
| rapidfort fedora 43 | doctl | 1.164.0-1.fc43 |
| rapidfort Oracle Linux 10 | containerd | 2.2.5-1.el10_2 |
| rapidfort Oracle Linux 9 | containerd | 2.2.5-1.el9 |
| rapidfort ubuntu 20.04 | containerd-stable | 0:2.2.2-0ubuntu1.1 |
| rapidfort ubuntu 22.04 | containerd-stable | 0:2.2.2-0ubuntu1.1 |
| rapidfort ubuntu 24.04 | containerd-stable | 0:2.2.2-0ubuntu1.1 |
| Red Hat | openshift-kni/commatrix | düzeltme belirtilmemiş |
| Red Hat | openshift-service-mesh/istio-must-gather-rhel9 | düzeltme belirtilmemiş |
| Red Hat | openshift-service-mesh/istio-rhel8-operator | düzeltme belirtilmemiş |
| Red Hat | openshift4-dev-preview-beta/openperouter-edge-rhel10-operator | düzeltme belirtilmemiş |
| Red Hat | openshift4-dev-preview-beta/openperouter-operator-bundle | düzeltme belirtilmemiş |
| Red Hat | openshift4-dev-preview-beta/openperouter-rhel9-operator | düzeltme belirtilmemiş |
| Red Hat | openshift4/cnf-tests-rhel8 | düzeltme belirtilmemiş |
| Red Hat | openshift4/cnf-tests-rhel9 | düzeltme belirtilmemiş |
| Red Hat | openshift4/ose-olm-rukpak-rhel8 | düzeltme belirtilmemiş |
| Red Hat | openshift4/ose-secrets-store-csi-mustgather-rhel8 | düzeltme belirtilmemiş |
| Red Hat | openshift4/ose-secrets-store-csi-mustgather-rhel9 | düzeltme belirtilmemiş |
| Red Hat | openshift4/ztp-site-generate-rhel8 | düzeltme belirtilmemiş |
| Red Hat | rhceph/alloy-rhel10 | düzeltme belirtilmemiş |
| Red Hat | rhceph/rhceph-promtail-rhel9 | düzeltme belirtilmemiş |
| seal go::Seal Security Database | github.com/containerd/containerd | 1.7.18-sp999 |
| seal go::Seal Security Database | github.com/containerd/containerd/v2 | 2.2.1-sp999 |
| seal go::Seal Security Database | sealsecurity.io/github.com/containerd/containerd | 1.7.18-sp999 |
| seal go::Seal Security Database | sealsecurity.io/github.com/containerd/containerd/v2 | 2.2.1-sp999 |
| ubuntu 22.04 | containerd-app | 2.2.1-0ubuntu1~22.04.2 |
| ubuntu 24.04 | containerd-app | 2.2.1-0ubuntu1~24.04.3 |
| ubuntu 25.10 | containerd-app | 2.2.1-0ubuntu1~25.10.2 |
| ubuntu 25.10 | containerd-stable | 2.1.6-0ubuntu1~25.10.2 |
| ubuntu 26.04 | containerd-app | 2.2.2-0ubuntu1.1 |
| ubuntu 26.04 | containerd-stable | 2.2.2-0ubuntu1.1 |
| wolfi | buildkitd | 0.31.0-r2 |
| wolfi | chartmuseum | 0.16.5-r15 |
| wolfi | cluster-api-helm-controller | 0.6.4-r8 |
| wolfi | consul-k8s-1.9 | 1.9.9-r0 |
| wolfi | containerd-1 | 1.7.33-r1 |
| wolfi | ctop | 0.7.7-r38 |
| wolfi | dagger | 0.20.8-r9 |
| wolfi | datadog-agent-7.72 | 7.72.4-r30 |
| wolfi | datadog-agent-7.73 | 7.73.3-r19 |
| wolfi | datadog-agent-7.74 | 7.74.1-r21 |
| wolfi | datadog-agent-7.76 | 7.76.3-r41 |
| wolfi | datadog-agent-7.77 | 7.77.3-r18 |
| wolfi | datadog-agent-7.78 | 7.78.4-r12 |
| wolfi | datadog-agent-7.79 | 7.79.2-r8 |
| wolfi | docker-29 | 29.6.0-r1 |
| wolfi | docker-cli-buildx | 0.35.0-r1 |
| wolfi | docker-compose | 5.1.4-r6 |
| wolfi | eksctl | 0.229.0-r1 |
| wolfi | envoy-gateway | 1.8.2-r0 |
| wolfi | falco-no-driver | 0.45.0-r0 |
| wolfi | fuse-overlayfs-snapshotter | 2.1.7-r17 |
| wolfi | gatekeeper-3.21 | 3.21.1-r14 |
| wolfi | grype | 0.114.0-r1 |
| wolfi | headlamp | 0.43.0-r3 |
| wolfi | helm-3 | 3.22.0-r0 |
| wolfi | helm-mapkubeapis | 0.6.1-r21 |
| wolfi | helm-operator | 1.42.3-r0 |
| wolfi | helm-push | 0.11.1-r16 |
| wolfi | helm-set-status | 0.3.0-r21 |
| wolfi | k3s | 1.36.2.1-r1 |
| wolfi | k3s-1.34 | 1.34.9.1-r1 |
| wolfi | k3s-1.35 | 1.35.6.1-r1 |
| wolfi | k8sgpt | 0.4.38-r3 |
| wolfi | k8ssandra-client | 0.9.1-r2 |
| wolfi | k9s | 0.51.0-r1 |
| wolfi | kaniko | 1.25.15-r9 |
| wolfi | kargo | 1.10.8-r1 |
| wolfi | kargo-1.10 | 0 |
| wolfi | kots | 1.130.6-r0 |
| wolfi | kube-arangodb-1.4 | 1.4.3-r14 |
| wolfi | kubescape | 4.0.9-r1 |
| wolfi | kubescape-operator | 0.2.172-r2 |
| wolfi | kubevela | 1.10.9-r0 |
| wolfi | linkerd2 | 26.9.2-r0 |
| wolfi | manifest-tool | 2.2.2-r4 |
| wolfi | neuvector-scanner | 4.199-r1 |
| wolfi | newrelic-infrastructure-agent | 1.77.1-r0 |
| wolfi | rancher-2.13 | 2.13.7-r0 |
| wolfi | rancher-2.14 | 2.14.3-r1 |
| wolfi | rancher-agent-2.13 | 2.13.9-r4 |
| wolfi | rancher-agent-2.14 | 2.14.3-r0 |
| wolfi | rancher-helm-3 | 3.20.0-r15 |
| wolfi | scorecard | 5.5.0-r10 |
| wolfi | skaffold | 2.23.0-r0 |
| wolfi | spegel | 0.7.2-r2 |
| wolfi | steampipe | 2.4.4-r7 |
| wolfi | syft | 1.45.1-r1 |
| wolfi | teleport-18.6 | 18.6.8-r30 |
| wolfi | tigera-operator-1.41 | 1.41.1-r16 |
| wolfi | tigera-operator-1.42 | 1.42.3-r0 |
| wolfi | trivy | 0.70.0-r7 |
| wolfi | trivy-operator | 0.30.1-r16 |
| wolfi | tw | 0.0.50-r0 |
| wolfi | wolfictl | 0.39.18-r2 |
| wolfi | xeol | 0.10.8-r47 |
| wolfi | zarf | 0.79.0-r1 |
| wolfi | zot | 2.1.17-r7 |
Referanslar
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53492
- https://access.redhat.com/security/cve/CVE-2026-53492
- https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.1/BRSA-rsj9m8ifmjes.toml
- https://github.com/containerd/containerd
- https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc
- https://nvd.nist.gov/vuln/detail/CVE-2026-53492
- https://ubuntu.com/security/notices/USN-8472-1
- https://ubuntu.com/security/notices/USN-8473-1