Findings

SUSE-SU-2026:24136-1

Security update for containerd

Published Oct 10, 2026 · updated Oct 15, 2026

This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 10, 2026 · OSV.dev

    Detected

    This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).

  2. Oct 15, 2026 · OSV.dev

    Fix available

    containerd fixed in 1.7.29-159998.1.1

  3. Oct 15, 2026 · OSV.dev

    Fix available

    containerd fixed in 1.7.29-159998.1.1

  4. Oct 15, 2026 · OSV.dev

    Updated

    This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).

Affected

  • SUSE:Linux Micro 6.0 containerd0 → 1.7.29-159998.1.1

Sources

  • OSV.devPackage advisorySUSE-SU-2026:24136-1

    Security update for containerd

    osv.dev

References