SUSE-SU-2026:4671-1
Security update for containerd
Published Oct 14, 2026 · updated Oct 15, 2026
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · OSV.dev
Detected
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
Oct 15, 2026 · OSV.dev
Fix available
containerd fixed in 1.7.29-16.116.1; containerd fixed in 1.7.29-16.116.1
Oct 15, 2026 · OSV.dev
Fix available
containerd fixed in 1.7.29-16.116.1
Oct 15, 2026 · OSV.dev
Updated
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
Affected
- SUSE:Linux Enterprise Server 12 SP5-LTSS containerd0 → 1.7.29-16.116.1
- SUSE:Linux Enterprise Server LTSS Extend containerd0 → 1.7.29-16.116.1