Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-9676)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which a remote authenticated attacker could exploit to cause a denial of service condition. CVE-2024-9676 Vulnerability Details CVEID: CVE-2024-9676 Description: Podman, Buildah and CRI-O a...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-5154)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which could allow an attacker to send a specially crafted URL request containing "dot dot" sequences /../ to read and write arbitrary files on the system. Vulnerability Details CVEID:...

CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12

CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12

CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12

CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

AZL-61812 CVE-2025-22872 affecting package cri-o 1.30.1-1

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60459 CVE-2025-22872 affecting package cri-tools for versions less than 1.32.0-2

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-60586 CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

[SECURITY] Fedora 42 Update: cri-tools1.29-1.29.0-11.fc42

CLI and validation tools for Kubelet Container Runtime Interface CRI...

CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13

CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13. A patched version of the package is available...

CVE-2025-27144 affecting package cri-o for versions less than 1.22.3-12

CVE-2025-27144 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...

[SECURITY] Fedora 41 Update: cri-tools1.29-1.29.0-11.fc41

CLI and validation tools for Kubelet Container Runtime Interface CRI...

CRI-O Installed (Linux)

Binary data cri-odetect.nbin...

Fedora 41 : cri-tools1.29 (2025-37c6639afe)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-37c6639afe advisory. - Resolve FTBFS - Resolves: rhbz2352149 - Adopt trivy for license detection to be consistent with cri- tools1.29..1.32 Tenable has extracted the preceding...

Azure Linux 3.0 Security Update: cri-tools / moby-runc / runc (CVE-2024-45310)

The version of cri-tools / moby-runc / runc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45310 advisory. - runc is a CLI tool for spawning and running containers according to the OCI...

CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11

CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2024-9676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-...

Linux Distros Unpatched Vulnerability : CVE-2024-8676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that...

Linux Distros Unpatched Vulnerability : CVE-2022-1708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs...

AZL-57289 CVE-2025-22869 affecting package cri-o 1.30.1-1

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...