gpp_maybe Security update for containerd

SUSE-SL-Micro-6.2-1139

This update for containerd fixes the following issues Update to 1.7.33: - CVE-2024-25621: overly broad default permission vulnerability (bsc#1253126). - CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host (bsc#1253132). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265794). - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262948). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266640). - CVE-2026-46680: containerd user ID handling bypass allows runAsNonRoot evasion (bsc#1268355). - CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). Changes for containerd: * https://github.com/containerd/containerd/releases/tag/v1.7.33 * https://github.com/containerd/containerd/releases/tag/v1.7.32 * https://github.com/containerd/containerd/releases/tag/v1.7.31 * https://github.com/containerd/containerd/releases/tag/v1.7.30 * https://github.com/containerd/containerd/releases/tag/v1.7.29 * https://github.com/containerd/containerd/releases/tag/v1.7.28

Release Date

Jul 2 2026
References

Bugzilla: 1253126, 1253132, 1260296, 1262266, 1262948, 1265794, 1266640, 1268355, 1268430, 1268441
CVEs: CVE-2024-25621, CVE-2025-64329, CVE-2026-33186, CVE-2026-33814, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-46680, CVE-2026-47262, CVE-2026-53488
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 ppc64le

Packages

containerd
Standalone OCI Container Daemon

1.7.33-160000.1.1 lock rpm

SUSE Linux Micro 6.2 aarch64

Packages

containerd
Standalone OCI Container Daemon

1.7.33-160000.1.1 lock rpm

SUSE Linux Micro 6.2 s390x

Packages

containerd
Standalone OCI Container Daemon

1.7.33-160000.1.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

containerd
Standalone OCI Container Daemon

1.7.33-160000.1.1 lock rpm