UbuntuUpdates.org

Package "containerd"

Name: containerd

Description:

daemon to control runC
Latest version: 1.6.12-0ubuntu3.1
Release: lunar (23.04)
Level: security
Repository: main
Homepage: https://containerd.io

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "containerd"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "containerd" in Lunar

Repository Area Version
base main 1.6.12-0ubuntu3
base universe 1.6.12-0ubuntu3
security universe 1.6.12-0ubuntu3.4
updates universe 1.6.12-0ubuntu3.4
updates main 1.7.2-0ubuntu1~23.04.1

Changelog

Version: 1.6.12-0ubuntu3.1 2023-07-05 09:07:12 UTC

  containerd (1.6.12-0ubuntu3.1) lunar-security; urgency=medium

  * SECURITY UPDATE: Denial of service through image processing
    - debian/patches/CVE-2023-25153.patch: limit the amount of
      bytes read to 20Mb in images/archive/importer.go.
    - CVE-2023-25153
  * SECURITY UPDATE: Incorrect supplementary group access control
    - debian/patches/CVE-2023-25173.patch: ensure that primary GID
      is included in the list of additionals GIDs in oci/spec_opts.go.
    - CVE-2023-25173

 -- David Fernandez Gonzalez <email address hidden> Tue, 04 Jul 2023 13:01:06 +0200
CVE-2023-25153 containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of b
CVE-2023-25173 containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not


About   -   Send Feedback to @ubuntu_updates