NONE
ALT-PU-2026-9817-2Package update containerd in branch sisyphus
Severity:
Closed issues (10)
NONE
NONE
NONE
NONE
HIGH8.4
containerd CRI checkpoint restore CDI annotation smuggling
CVSS 4.0HIGH 8.4
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:NMEDIUM5.6
containerd: CRI checkpoint import allows local image tag poisoning
CVSS 4.0MEDIUM 5.6
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:LMEDIUM6.9
containerd image-triggered runtime DoS via unbounded group parsing
CVSS 4.0
CVSS:4.0/CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NHIGH7.1
Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
CVSS 4.0HIGH 7.1
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NHIGH8.7
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
CVSS 4.0HIGH 8.7
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N