GO-2026-6594 Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1750783972)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1750783972 advisory. - A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper...

Rocky Linux 8 [CIQ] Security Update: container-selinux / crit / criu / criu-debuginfo / criu-debugsource / etc Multiple Vulnerabilities (crlsa-2020_1650)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20201650 advisory. runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation CVE-2019-19921 containers/image: Container images rea...

Rocky Linux 9 [CIQ] Security Update: ignition / ignition-debuginfo / ignition-debugsource (crlsa-2022_8126)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228126 advisory. ignition: configs are accessible from unprivileged containers in VMs running on VMware products CVE-2022-1706 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: fuse-overlayfs / fuse-overlayfs-debuginfo / etc Multiple Vulnerabilities (crlsa-2019_3494)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20193494 advisory. QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 containers/image: not enforcing TLS when sending username+password credentials to...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0903)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260903 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / etc (crlsa-2021_0705)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20210705 advisory. podman: container users permissions are not respected in privileged containers CVE-2021-20188 Tenable has extracted the preceding description block directly from th...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (crlsa-2021_1796)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211796 advisory. golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference CVE-2020-29652 podman: Remote traffic to rootless containers is seen...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2021_0706)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20210706 advisory. podman: container users permissions are not respected in privileged containers CVE-2021-20188 Tenable has extracted the preceding description block directly from th...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0023)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260023 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155,...

Rocky Linux 8.6 [CIQ] Security Update: containers-common (ciqsa-2026_1084)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261084 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: skopeo / skopeo-tests (ALMALINUX9.2:CLSA-2025:1762421840)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762421840 advisory. - A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry access...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1762180294)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762180294 advisory. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause...

Rocky Linux 8 [CIQ] Security Update: oci-systemd-hook / oci-systemd-hook-debuginfo / etc Multiple Vulnerabilities (crlsa-2019_3403)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20193403 advisory. QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 containers/image: not enforcing TLS when sending username+password credentials to...

Rocky Linux 8.8 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0793)

The Rocky Linux 8.8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260793 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752088672)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752088672 advisory. - A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated regist...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_1311)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261311 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0848)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260848 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2021-36221, CVE-2021-41190, CVE-2022-170...

CLEANSTART-2024-YM37206 flaw was found in crun where containers were incorrectly started with non-empty default permissions

Security vulnerability affects the crun package. A flaw was found in crun where containers were incorrectly started with non-empty default permissions...

CVE-2026-64676

A flaw was found in Kata Containers. When the mem-agent feature is enabled, an untrusted host can bypass authorization checks in the kata-agent's memory management. This allows the host to tamper with in-guest memory, leading to attacker-controlled availability and performance degradation of...