33 matches found
CentOS 8 : container-tools:rhel8 (CESA-2021:4154)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4154 advisory. - containers/storage: DoS via malicious image CVE-2021-20291 - buildah: Host environment variables leaked in build container when using chroot isolatio...
Moderate: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RLSA-2021:4154 Moderate: container-tools:rhel8 security, bug fix, and enhancement update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 containers/storage: DoS via malicious image CVE-2021-20291 For...
Moderate: container-tools:rhel8 security, bug fix, and enhancement update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 containers/storage: DoS via malicious image CVE-2021-20291 For...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.8.2 bug fix and security update
Red Hat OpenShift Container Platform release 4.8.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a...
Fedora: Security Advisory for containers-common (FEDORA-2021-ec00da7faa)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for crun (FEDORA-2021-83b3740389)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security fix for the ALT Linux 10 package podman version 3.1.2-alt1
April 22, 2021 Alexey Shabalin 3.1.2-alt1 - new version 3.1.2 Fixes: CVE-2021-20291, CVE-2021-20199...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.7 security update
Red Hat OpenShift Container Platform release 4.7.7 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...
CVE-2021-20291
creationtimestamp| type| source ---|---|--- 2021-04-18 14:31:16+00:00| seen| https://t.me/CyberSecurityTechnologies/3154 2022-01-03 08:26:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3162 2026-08-29 18:00:04+00:00| published-proof-of-concept|...
CVE-2021-20291
CVE-2021-20291 corresponds to a deadlock DoS in github.com/containers/storage when unpacking container image layers. If a layer is not a valid tar archive, the tar unpack stream may hang indefinitely, causing a deadlock and denial of service. The issue affects versions prior to 1.28.1 and has bee...
