PatchFirst · Свежие уязвимости
За последние 30 дней в containerd опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 7
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
This update for containerd rebuilds it against the current go security release.
This update for containerd rebuilds it against the current go security release.
This update for containerd rebuilds it against the current go security release.
This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260296). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265794). - CVE-2026-34986: github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262948). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266640).
This update for containerd rebuilds it against the current go 1.25 security release.
This update for containerd rebuilds it against the current go 1.25 security release.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.