Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4288-1

UNKNOWN

Security update for containerd

Published Nov 28, 2025

Modified 1 months ago

Fix available

Details

This update for containerd fixes the following issues:

Update to containerd v1.7.29
CVE-2024-25621: Fixed an overly broad default permission vulnerability. (bsc#1253126)
CVE-2025-64329: Fixed a goroutine leaks which can lead to memory exhaustion on the host. (bsc#1253132)

Affected Packages

SUSE:Enterprise Storage 7.1containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Enterprise Storage 7.1containerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOScontainerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSScontainerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOScontainerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSScontainerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Micro 5.2containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Micro 5.3containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Micro 5.4containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Micro 5.5containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Containers 15 SP6containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Containers 15 SP6containerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Containers 15 SP6containerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Containers 15 SP7containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Containers 15 SP7containerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Module for Containers 15 SP7containerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP3-LTSScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP3-LTSScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP4-LTSScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP4-LTSScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP4-LTSScontainerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP5-LTSScontainerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP5-LTSScontainerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server 15 SP5-LTSScontainerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3containerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4containerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4containerd-devel

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5containerd

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5containerd-ctr

Fixed in:

1.7.29-150000.128.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5containerd-devel

Fixed in:

1.7.29-150000.128.1

openSUSE:Leap 15.6containerd

Fixed in:

1.7.29-150000.128.1

openSUSE:Leap 15.6containerd-ctr

Fixed in:

1.7.29-150000.128.1

openSUSE:Leap 15.6containerd-devel

Fixed in:

1.7.29-150000.128.1

References

REPORThttps://bugzilla.suse.com/1253126 REPORThttps://bugzilla.suse.com/1253132 WEBhttps://www.suse.com/security/cve/CVE-2024-25621 WEBhttps://www.suse.com/security/cve/CVE-2025-64329 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-20254288-1/

Upstream

CVE-2024-25621 CVE-2025-64329

Related

CVE-2024-25621 CVE-2025-64329

Ecosystems

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 openSUSE Leap 15.6

Timeline

PublishedNov 28, 2025

ModifiedNov 28, 2025

SUSE-SU-2025:4288-1 | Mondoo Vulnerability Intelligence