SUSE-SU-2024:3188-1

Details

Description of the patch:

This update for containerd fixes the following issues:

Update to containerd v1.7.21
CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070)
CVE-2023-45142: Fixed DoS vulnerability in otelhttp. (bsc#1228553)

Affected Packages

containerd

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

1.7.21-16.94.1

References

ADVISORY

https://bugzilla.suse.com/1217070

ADVISORY

https://bugzilla.suse.com/1217952

ADVISORY

https://bugzilla.suse.com/1221400

ADVISORY

https://bugzilla.suse.com/1224323

ADVISORY