Rocky Linux 8 [CIQ] Security Update: crit / criu / criu-debuginfo / criu-debugsource / libslirp / etc (crlsa-2021_0531)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20210531 advisory. podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API CVE-2020-14370 Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1790729698)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790729698 advisory. - A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The...

AlmaLinux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1784307446)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784307446 advisory. - Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey'...

PT-2026-110083

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-110080

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-110079

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-110075

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-103871

Name of the Vulnerable Software and Affected Versions Docker BuildKit affected versions not specified Description The Dockerfile frontend loads the Dockerfile and .dockerignore files of a build context into memory without a size limit. An oversized file within the build context can cause buildkit...

PT-2026-105806

Summary The dashboard reads its authentication credentials from $ESPHOME USERNAME and $ESPHOME PASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator w...

Rocky Linux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1782214655)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782214655 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number o...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1772456640)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772456640 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...

Rocky Linux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1778615531)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778615531 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

PT-2026-110077

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1784308178)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784308178 advisory. - When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request...

PT-2026-110076

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-110081

Security vulnerability affects the docker-cli-buildx package. This issue is resolved in later releases. See references for vulnerability details...

Rocky Linux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1784307446)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784307446 advisory. - Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKe...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1786706622)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786706622 advisory. - The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or...

Rocky Linux 8.6 [CIQ] Security Update: podman / podman-catatonit / podman-docker / podman-gvproxy / etc Multiple Vulnerabilities (ciqsa-2026_1319)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261319 advisory. This advisory aggregates security fixes for the podman SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-6032, CVE-2025-31133, CVE-2025-52565,...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2026_3337)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263337 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 golang: archive/zip: Excessive CPU...