15442 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-27651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby Docker Engine where containers...
Linux Distros Unpatched Vulnerability : CVE-2024-45310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be...
Linux Distros Unpatched Vulnerability : CVE-2024-11218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a maliciou...
SUSE SLES15 Security Update : podman (SUSE-SU-2025:0775-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0775-1 advisory. - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237641 - CVE-2024-9676:...
Linux Distros Unpatched Vulnerability : CVE-2024-32473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. I...
Linux Distros Unpatched Vulnerability : CVE-2021-3602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds e.g. Dockerfile RUN...
podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile
A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...
cri-o: Checkpoint restore can be triggered from different namespaces
A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the validations run on the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.2 packages and security update
Red Hat OpenShift Container Platform release 4.18.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
Security update for podman
This update for podman fixes the following issues: CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237641 CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Service D...
SUSE-SU-2025:0775-1 Security update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237641 - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Servi...
Important: Red Hat Enhancement Advisory: OpenShift Virtualization 4.17.5 Images
Red Hat OpenShift Virtualization release 4.17.5 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...
Important: Red Hat Enhancement Advisory: OpenShift Virtualization 4.14.11 Images
Red Hat OpenShift Virtualization release 4.14.11 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...
Linux Distros Unpatched Vulnerability : CVE-2021-20291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked usi...
Linux Distros Unpatched Vulnerability : CVE-2020-14370
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible...
Linux Distros Unpatched Vulnerability : CVE-2020-1702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using...
The vulnerability of the libavformat library for multiplexing and demultiplexing media containers in the FFmpeg multimedia library allows a attacker to compromise the integrity of the protected information.
The vulnerability of the libavformat library, which is used for multiplexing and demultiplexing media containers in FFmpeg’s multimedia library, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the `avformat_free_context()` function in the libavformat multimedia library of FFmpeg allows attackers to compromise the integrity of protected information.
The vulnerability of the avformatfreecontext function in the library for multiplexing and demultiplexing media containers in the libavformat multimedia library of FFmpeg is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...
Important: Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.5
Updated service-interconnect container images are now available for Service Interconnect 1.5 for RHEL 9. Users of service-interconnect 1.5 rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users of thes...