SUSE-SU-2025:4288-1

Details

Description of the patch:

This update for containerd fixes the following issues:

Update to containerd v1.7.29
CVE-2024-25621: Fixed an overly broad default permission vulnerability. (bsc#1253126)
CVE-2025-64329: Fixed a goroutine leaks which can lead to memory exhaustion on the host. (bsc#1253132)

Affected Packages

containerd

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Fixed in:

1.7.29-150000.128.1

containerd-ctr

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Fixed in:

1.7.29-150000.128.1

containerd-devel

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Containers 15 SP6

Fixed in:

1.7.29-150000.128.1

References

ADVISORY

https://bugzilla.suse.com/1253126

ADVISORY

https://bugzilla.suse.com/1253132

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2025-November/023426.html

ADVISORY

https://www.suse.com/security/cve/CVE-2024-25621/

ADVISORY

https://www.suse.com/security/cve/CVE-2025-64329/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2025/suse-su-20254288-1/