OESA-2026-3653 kata-containers-go security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: A flaw was found in Kata Containers, affecting both its Rust and Go runtimes. An authenticated pod user can exploit this by setting the io.katacontainers.configpath annotation to an arbitra...

PT-2026-86385

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 2.0.0 Description Insufficient restrictions on template operations allow accounts with the default user role to create, modify, and delete compose templates, including instance-wide defaults. This allows for the...

sonar v0.4.1

██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a group — normally th...

AZL-99234 CVE-2026-85091 affecting package kata-containers 4.1.0.kata0-1

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

[SECURITY] Fedora 43 Update: bubblewrap-0.12.0-1.fc43

Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces...

AZL-99138 CVE-2026-84304 affecting package kata-containers-preview 3.27.0~preview2-2

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-99240 CVE-2026-84304 affecting package kata-containers-cc for versions less than 3.15.0.aks0-21

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-50540 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17

CVE-2026-50540 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...

CVE-2026-48586 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17

CVE-2026-48586 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...

CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17

CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...

CVE-2026-55969 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17

CVE-2026-55969 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.21.2 product release

The components for Red Hat OpenShift for Windows Containers 10.21.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

[SECURITY] Fedora 44 Update: bubblewrap-0.12.0-1.fc44

Bubblewrap /usr/bin/bwrap is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces...

Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: Containers...

EUVD-2026-39477

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts...

kata-containers v4.1.0

Kata Containers Welcome to Kata Containers! This repository is the home of the Kata Containers code for the 2.0 and newer releases. If you want to learn about Kata Containers, visit the main Kata Containers website. Introduction Kata Containers is an open source project and community working to...

EUVD-2026-64603

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

CVE-2026-78122: Insufficient Granularity of Access Control

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

PT-2026-79743

Name of the Vulnerable Software and Affected Versions docker-socket-proxy versions prior to 0.5.1 Description Insufficient access control granularity occurs when the CONTAINERS environment variable is set, failing to properly gate read endpoints within the /containers Docker API namespace. This...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102707 advisory. A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to...