SUSE-SU-2023:4727-1

    Dashboard / Vulnerabilities / SUSE-SU-2023:4727-1

    SUSE-SU-2023:4727-1

    Published: 12 Dec 2023Last Modified: 4 Feb 2026
    Upstream:
    CVE-2022-1996
    Aliases:
    CVE-2022-1996

    Summary: Security update for catatonit, containerd, runc

    Details: This update of runc and containerd fixes the following issues: containerd: - Update to containerd v1.7.8. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.8 * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528) catatonit: - Update to catatonit v0.2.0. * Change license to GPL-2.0-or-later. - Update to catatont v0.1.7 * This release adds the ability for catatonit to be used as the only process in a pause container, by passing the -P flag (in this mode no subprocess is spawned and thus no signal forwarding is done). - Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to socket activation or features somewhat adjacent to socket activation (such as passing file descriptors). runc: - Update to runc v1.1.10. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.10

    References: https://www.suse.com/support/update/announcement/2023/suse-su-20234727-1/, https://bugzilla.suse.com/1200528, https://www.suse.com/security/cve/CVE-2022-1996

    Affected packages

    Package

    Name: containerd

    Purl: pkg:rpm/suse/containerd&distro=SUSE%20Linux%20Enterprise%20Micro%205.3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.7.8-150000.103.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2023:4727-1 | CVE-DB