openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:21265-1)

medium Nessus Plugin ID 326025

Synopsis

The remote openSUSE host is missing one or more security updates.

Description

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21265-1 advisory.

Changes in cadvisor:

- update to 0.60.3:
* Move OOM watching out of the lib module into the binary
* lib/model: make ContainerStats sub-stats pointers to convey collection presence
- update to 0.60.1:
* cpuload/netlink: report the real error and skip the reader on cgroup v2
* deploy: add lib/go.mod to the image build's dependency cache
- update to 0.60.0:
* Exposing additional cgroup v2 memory.stat metrics
* lib: introduce github.com/google/cadvisor/lib a lean, kubelet-focused library module
- bump x/net to 0.55 (bsc#1266645, CVE-2026-39821)

- update to 0.57.0 (bsc#1260305, CVE-2026-33186):
* integration: add more Docker container handler tests
* integration: add containerd container handler tests
* integration: add Prometheus metrics endpoint tests
* fix: support podman `volatile-containers.json` and/or `containers.json`
* proposed roadmap for cAdvisor
* remove log message when you can't read productName
* Refactor Github Action per b/485167538
* fix crio deadlock in getting crio sandbox containers
* Add container_creation_time_seconds (previously:
container_start_time_seconds); use runtime start time for container_start_time_seconds (podman & docker)
* deps: github.com/moby/moby/client v0.4.0, moby/api v1.54.1, containerd/ttrpc v1.2.8
* fix(build): update k8s-staging-test-infra image in integ tests
* feat(manager/container): add configurable initial splay and max jitter factors
* feat(manager): add constraint data in OOM events
* fix: add v-prefixed GHCR image tags for release consistency
* build(deps): bump the go_modules group across 2 directories with 1 update
* Expose cgroup v2 memory.events as Prometheus metrics
* deploy: bump base images to Alpine 3.23

- Update to version 0.56.2:
* docker: fix nil pointer dereference when GraphDriver is nil
* Update healthcheck.sh
* Update entrypoint.sh
* docker: migrate to github.com/moby/moby modules
* Update containerd, docker, moby, and opencontainers dependencies
* update README
* Update copyright year in healthcheck.sh
* Update copyright year in entrypoint.sh
* Added cadvisor boilerplate header to deploy/entrypoint.sh
* Added cadvisor boilerplate header to deploy/healthcheck.sh
* Add EXPOSE 8080 to document default port
* Fix healthcheck to respect custom port flag
* Add entrypoint wrapper to preserve -logtostderr flag
* add std in summary
* fix formatting
* Update container/docker/factory.go
* Update factory.go
* Update factory.go
* Update factory.go
* Fix for issue #3772
* docs: replace references to docker registry `gcr.io` with `ghcr.io`
* Expose s390x CPU Topology to Prometheus

- update to 0.55.1:
* manager: fix race condition in Stop() using sync.Once
* manager: fix race condition in Stop() using sync.Once
- update to 0.55.0:
* Reduce lock contention in manager package
* container/podman: fix `zfsFilesystem` and `zfsParent` being swapped.
* devicemapper: use atomic.Value for lock-free cache reads
* Reduce lock contention in cache/memory package
* zfs: use atomic.Value for lock-free cache reads
* fix: docker health check status not updating
* align docker and podman implementations
* disable CGO for fully static binaries
* close stale PRs and Issues
* refactor(container): Migrate to std lib context package
* add workflow_dispatch to stale github action
* plugin factory: remove useless RegisterPlugin log output
* feat(summary): add count in percentiles
* machine: fixes for unix.Uname use
* feat: add LoadTaskProcess api in containerd client
* feat: add exit code in container deletion events
* feat: add CRI-O integration tests
* test: reorganize integration tests and add CRI-O test coverage
* refactor: remove duplicate tests from api package and add missing CRI-O tests
* fix: update golang.org/x/crypto to v0.45.0 to fix security vulnerabilities
* container/(docker|podman): rewrite obtaining IP-address
* Upgrade GitHub Actions to latest versions
* Upgrade GitHub Actions for Node 24 compatibility
* feat: add fs io cost metrics
* go.mod: github.com/docker/go-connections v0.6.0
* fs: introduce pluggable filesystem architecture
* Apply build tags liberally for supported environments (linux)
* Replace godirwalk with os.ReadDir from standard library
* feat: add cpu burst metrics
- update to 0.54.1:
* chore: update cAdvisor image registry and version in DaemonSet
* ci: update Ubuntu version to 24.04 in GitHub Actions workflows
* chore: re-enable golangci-lint checks and fix violations
* container/docker: GetStats: prevent nil-pointer
- update to 0.54.0:
* Let us try to use ghcr.io for container images
* Add a GH action to create release binaries
* use qemu/docker to build arch specific binaries
* add -buildvcs=false to GH action
* fix(3643) add containerd-snapshotter support
* Update README.md with latest Docker image version and registry
* Rebase to alpine 3.22, install thin-provisioning-tools from main repo
* feat: add metric for container health check status (DOCKER- Specific!)
* Update golang and deps
- update to version 0.54.1:
* container/docker: GetStats: prevent nil-pointer
* chore: re-enable golangci-lint checks and fix violations
* fix: use Docker-embedded containerd socket in integration tests
* refactor: remove Mesos container support
* ci: add diagnostic logging for docker/containerd debugging
* fix: persist containerd client error to prevent nil pointer dereference
* ci: update Ubuntu version to 24.04 in GitHub Actions workflows
* chore: update cAdvisor image registry and version in DaemonSet
* fix: handle nil Health state in docker container handler
* ci: update Go version to 1.25 in GitHub Actions workflows
* fix: update dependencies to address security vulnerabilities
* add health status tests
* feat: Update docker container handler to include health status in stats
* Rebase to alpine 3.22, install thin-provisioning-tools from main repo
* Update README.md Docker image reference
* fix(3643) add containerd-snapshotter support
* add -buildvcs=false to GH action
* use qemu/docker to build arch specific binaries
* Add a GH action to create release binaries
* Let us try to use ghcr.io for container images (#3699)

- update to 0.53.0 (bsc#1257429, CVE-2024-45310, bsc#1267788, CVE-2026-10722):
* fix potential hang on containerd client.LoadContainer
* Bump dependencies to latest (June 2, 2025)
* fix: fix call Errorf with wrong err
* Fixed possible data race
* Use built-in error wrapping instead of pkg/errors

- update to 0.52.1:
* Make resctrl optional/pluggable
- update to 0.52.0:
* bump containerd related deps: api v1.8.0; errdefs v1.0.0;
ttrpc v1.2.6
* chore: Update Prometheus libraries
* ci: golangci-lint bump, fixes, and cleanups
* bump runc to v1.2.4
* Add Pressure Stall Information Metrics
* Switch to opencontainers/cgroups repository (includes update from golang 1.22 to 1.24)
* Bump to newer opencontainers/image-spec @ v1.1.1
- update to 0.49.2:
* Cp fix test
* Revert reduce_logs_for_kubelet_use_crio

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected cadvisor package.

Plugin Details

Severity: Medium

ID: 326025

File Name: openSUSE-2026-21265-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 7/9/2026

Updated: 7/9/2026

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.81

CVSS v2

Risk Factor: Low

Base Score: 1.7

Temporal Score: 1.3

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS Score Source: CVE-2026-10722

CVSS v3

Risk Factor: Low

Base Score: 3.6

Temporal Score: 3.3

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2024-45310

CVSS v4

Risk Factor: Medium

Base Score: 4.8

Threat Score: 1.9

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/o:novell:opensuse:16.0, p-cpe:/a:novell:opensuse:cadvisor

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/6/2026

Vulnerability Publication Date: 9/3/2024

Reference Information

CVE: CVE-2024-45310, CVE-2025-22868, CVE-2026-10722, CVE-2026-33186, CVE-2026-39821

Detections

Analytics