gpp_maybe Security update for containerd

SUSE-SLE-Micro-6.1-591

This update for containerd fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265794). - CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262948). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266640).

Release Date

Jun 25 2026
References

Bugzilla: 1262948, 1265794, 1266640
CVEs: CVE-2026-33814, CVE-2026-34986, CVE-2026-39821
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 aarch64

Packages

containerd
Standalone OCI Container Daemon

1.7.29-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

Packages

containerd
Standalone OCI Container Daemon

1.7.29-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 s390x

Packages

containerd
Standalone OCI Container Daemon

1.7.29-slfo.1.1_3.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

containerd
Standalone OCI Container Daemon

1.7.29-slfo.1.1_3.1 lock rpm