app-containers/containerd-2.3.5 — Security Advisories

portage-ng glsa

▸ GLSA 202408-01 containerd: Multiple Vulnerabilities this version unaffected high local 2024-08-06

Multiple vulnerabilities have been discovered in containerd, the worst of which could lead to privilege escalation.

Announced: 2024-08-06
Revised: 2024-08-06
Access: local
Bugs: #897960
Advisory: https://security.gentoo.org/glsa/202408-01

Affected packages

Package	Arch	Vulnerable	Unaffected
app-containers/containerd	*	< 1.6.19	>= 1.6.19

Background

containerd is a daemon with an API and a command line client, to manage containers on one machine. It uses runC to run containers according to the OCI specification.

Description

Multiple vulnerabilities have been discovered in containerd. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All containerd users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-containers/containerd-1.6.19"

References

▸ GLSA 202401-31 containerd: Multiple Vulnerabilities this version unaffected normal remote 2024-01-31

Multiple vulnerabilities have been found in containerd, the worst of which could result in privilege escalation.

Announced: 2024-01-31
Revised: 2024-01-31
Access: remote
Bugs: #802948 #816315 #834689 #835917 #850124 #884803
Advisory: https://security.gentoo.org/glsa/202401-31