CLEANSTART-2024-DK28748 vulnerability was found in cri-o

Security vulnerability affects the cri-o package. A vulnerability was found in cri-o...

CLEANSTART-2024-TE23978 vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API

Security vulnerability affects the cri-o package. A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API...

CLEANSTART-2024-UR07986 flaw was found in CRI-O in the way it set kernel options for a pod

Security vulnerability affects the cri-o package. A flaw was found in CRI-O in the way it set kernel options for a pod...

CLEANSTART-2024-TX41815 vulnerability was found in Podman, Buildah, and CRI-O

Security vulnerability affects the podman package. A vulnerability was found in Podman, Buildah, and CRI-O...

container-cve-2021-22555

Reproducer for CVE-2021-22555 as a container First, this rolls in the exploit code from here as a handy pre-built container: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Pre-built container: quay.io/cgwalters/cve-2021-22555 Mitigation: seccomp profiles A stron...

RHCOS 4 : OpenShift Container Platform 4.16.74 (RHSA-2026:89713)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89713 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame...

SUSE SLES12 Security Update : containerd (SUSE-SU-2026:4923-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4923-1 advisory. - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response bod...

AZL-111896 CVE-2026-97045 affecting package cri-tools 1.32.0-10

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

AZL-111688 CVE-2026-97045 affecting package cri-o 1.30.1-1

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

AZL-111691 CVE-2026-78661 affecting package cri-o 1.30.1-1

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

AZL-111893 CVE-2026-78661 affecting package cri-tools 1.32.0-10

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socket

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image bsc1268441...

SUSE-SU-2026:4923-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. - CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image...

AZL-111700 CVE-2026-116591 affecting package cri-o 1.30.1-1

compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...

Security Bulletin: IBM Engineering Lifecycle Management on Hybrid Cloud is affected by multiple security vulnerabilities.

Summary This release addresses security vulnerabilities in application and operator images of ELM on Hybrid Cloud. The identified vulnerabilities affect OS packages and Go standard library packages and impact the product in the deployed environment. Two of the vulnerabilities are rated high, with...

Amazon Linux 2 : cri-tools (ALAS-2026-4042)

The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4042 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority...

Security update for containerd

This update for containerd fixes the following issues: CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image bsc1268441...

SUSE-SU-2026:24381-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. - CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:4787-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4787-1 advisory. - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430. Tenab...