-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5162-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
June 12, 2022                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : containerd
CVE ID         : CVE-2022-24769 CVE-2022-31030

Two vulnerabilities were discovered that the containerd container
runtime, which could result in denial of service or incomplete restriction
of capabilities.

For the stable distribution (bullseye), these problems have been fixed in
version 1.4.13~ds1-1~deb11u2.

We recommend that you upgrade your containerd packages.

For the detailed security status of containerd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/containerd

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Debian: DSA-5162-1: containerd security update

June 12, 2022
Two vulnerabilities were discovered that the containerd container runtime, which could result in denial of service or incomplete restriction of capabilities

Summary

Two vulnerabilities were discovered that the containerd container
runtime, which could result in denial of service or incomplete restriction
of capabilities.

For the stable distribution (bullseye), these problems have been fixed in
version 1.4.13~ds1-1~deb11u2.

We recommend that you upgrade your containerd packages.

For the detailed security status of containerd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/containerd

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Severity
Package : containerd
CVE ID : CVE-2022-24769 CVE-2022-31030

Related News