openSUSE-SU-2026:22117-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22117-1

Upstream

Related

Published

2026-10-14T07:45:05Z

Modified

2026-10-19T17:23:15Z

Summary

Security update for cadvisor

Details

This update for cadvisor fixes the following issues:

Changes in cadvisor:

update to 0.60.6:
- workflows: mirror release tags to lib/ module tags
- fs/zfs: fall back to VFS when zfs stats are unavailable
- storage/stdout: nil-check Cpu, Network, and Memory stats
- Treat memory-only NUMA nodes as valid topology
update vendor.tar to fix
- bsc#1283657, CVE-2026-63209: cadvisor: github.com/klauspost/compress: signed integer overflow in s2.NewDict()

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.60.6-bp160.1.1

{
    "binaries":  [
        {
            "cadvisor":  "0.60.6-bp160.1.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22117-1.json"