{"affected":[{"ecosystem_specific":{"binaries":[{"containerd":"1.6.12-16.68.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 12","name":"containerd","purl":"purl:rpm/suse/containerd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.6.12-16.68.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for containerd fixes the following issues:\n\nUpdate to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). \n\nAlso includes the following fix:\n\n- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).\n- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).\n","id":"SUSE-SU-2022:4409-1","modified":"2022-12-12T08:49:56Z","published":"2022-12-12T08:49:56Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224409-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1197284"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206065"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206235"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-23471"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-27191"}],"related":["CVE-2022-23471","CVE-2022-27191"],"summary":"Security update for containerd"}