VUL-0: CVE-2022-1996: go-restful: CORS bypass
VUL-0: CVE-2023-47108: TRACKERBUG: otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
VUL-0: CVE-2023-45288: go1.21,go1.22: net/http, x/net/http2: close connections when receiving too many headers
VUL-0: containerd: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)
VUL-0: CVE-2023-45142: TRACKERBUG: otelhttp,otelhttptrace,otelrestful: DoS vulnerability
cyphar
important
security
Security update for containerd
This update for containerd fixes the following issues:
- Update to containerd v1.7.21. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.21
Fixes CVE-2023-47108. bsc#1217070
Fixes CVE-2023-45142. bsc#1228553
- Update to containerd v1.7.17. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.17
- Update to containerd v1.7.16. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.16
CVE-2023-45288 bsc#1221400
- Update to containerd v1.7.15. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.15
- Update to containerd v1.7.14. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.14
- Update to containerd v1.7.13. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.13
- Update to containerd v1.7.12. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.12
- Update to containerd v1.7.11. Upstream release notes:
https://github.com/containerd/containerd/releases/tag/v1.7.11
GHSA-jq35-85cj-fj4p bsc#1224323
containerd