< back to search

gpp_maybe Security update for containerd
SUSE-SLE-Module-Containers-15-SP7-2026-2639

This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265794). - CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262948). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266640).

cloud_download Downloads

Containers Module 15.7 aarch64
  • Packages
    containerd
    Standalone OCI Container Daemon
    1.7.29-150000.137.1 lock src
    containerd-ctr
    Client for containerd
    1.7.29-150000.137.1 lock rpm
    containerd-devel
    Source code for containerd
    1.7.29-150000.137.1 lock rpm
Containers Module 15.7 ppc64le
  • Packages
    containerd
    Standalone OCI Container Daemon
    1.7.29-150000.137.1 lock src
    containerd-ctr
    Client for containerd
    1.7.29-150000.137.1 lock rpm
    containerd-devel
    Source code for containerd
    1.7.29-150000.137.1 lock rpm
Containers Module 15.7 s390x
  • Packages
    containerd
    Standalone OCI Container Daemon
    1.7.29-150000.137.1 lock src
    containerd-ctr
    Client for containerd
    1.7.29-150000.137.1 lock rpm
    containerd-devel
    Source code for containerd
    1.7.29-150000.137.1 lock rpm
Containers Module 15.7 x86_64
  • Packages
    containerd
    Standalone OCI Container Daemon
    1.7.29-150000.137.1 lock src
    containerd-ctr
    Client for containerd
    1.7.29-150000.137.1 lock rpm
    containerd-devel
    Source code for containerd
    1.7.29-150000.137.1 lock rpm