critical
SUSE-SU-2024:3221-1
Security update for containerd
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070) - CVE-2023-45142: Fixed DoS vulnerability in otelhttp. (bsc#1228553)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.5 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap Micro 5.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd, containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd, containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd, containerd-ctr, containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.1 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.4 | containerd | 1.7.21-150000.117.1 |
Show all 25 entries from 13 sources
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.5 | containerd | 1.7.21-150000.117.1 |
| openSUSE Leap 15.5 | containerd-ctr | 1.7.21-150000.117.1 |
| openSUSE Leap 15.5 | containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd-ctr | 1.7.21-150000.117.1 |
| openSUSE Leap 15.6 | containerd-devel | 1.7.21-150000.117.1 |
| openSUSE Leap Micro 5.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.2 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.3 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.4 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.5 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd-ctr | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise 15.6 | containerd-devel | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.1 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.2 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.3 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.4 | containerd | 1.7.21-150000.117.1 |
| SUSE Linux Enterprise Micro 5.5 | containerd | 1.7.21-150000.117.1 |
References
- https://bugzilla.suse.com/1200528
- https://bugzilla.suse.com/1217070
- https://bugzilla.suse.com/1228553
- https://lists.suse.com/pipermail/sle-security-updates/2024-September/019420.html
- https://www.suse.com/security/cve/CVE-2022-1996/
- https://www.suse.com/security/cve/CVE-2023-45142/
- https://www.suse.com/security/cve/CVE-2023-47108/
- https://www.suse.com/support/security/rating/