proxmox-lxc-docker-fix

Solución para AppArmor en LXC de Proxmox para Docker/Contenedores Solución para CVE-2025-52881 : Corrige la rotura de Docker, Podman y otros entornos de ejecución de contenedores en contenedores LXC de Proxmox causada por incompatibilidad de AppArmor con runc 1.2.7+/1.3.2+ 🚨 El Problema...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: dive or you can dive with Docker directly: alias dive="docker run -ti --rm -v...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

pumba

Herramienta de pruebas de caos para Docker, containerd y Podman Inicio rápido · Guía de usuario · Caos de red · Despliegue · Contribuciones Pumba es una herramienta de pruebas de caos y emulación de red para contenedores Docker, containerd y Podman. Inspirado en Netflix Chaos Monkey, Pumba lleva ...

container-cve-2021-22555

CVE-2021-22555 の再現コードをコンテナとして提供 まず、こちらのエクスプロイトコードを便利なプリビルドコンテナとしてまとめたものです： https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 プリビルドコンテナ： quay.io/cgwalters/cve-2021-22555 緩和策：seccomp プロファイル 強力な緩和策として、cloneCLONENEWUSER を拒否する seccomp を有効にすることが挙げられます。アップストリームの Kubernete...

foxcage

foxcage Ejecuta Firefox en un contenedor Podman sin root para aislamiento de seguridad. Tu navegador se ejecuta con casi ninguna capacidad de Linux, en su propio espacio de nombres de usuario y de red, aislado del host — mientras sigue teniendo aceleración completa por GPU, audio y soporte DRM...

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a use...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.1.3-1.hum1 aarch64, x8664 podman-docker-6.1.3-1.hum1 noarch podman-machine-6.1.3-1.hum1 aarch64, x8664 podman-remote-6.1.3-1.hum1 aarch64, x8664 podmansh-6.1.3-1.hum1 aarch64,...

Environment Variable Exposure in Podman (CVE-2026-57231)

: A security vulnerability exists in Podman versions 1.8.1 through 5.8.3 related to the improper handling of environment variables. Container images defined with an environment variable key but no value can trick Podman into inheriting that variable from the host. Furthermore, the use of an...

GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman...

GO-2026-6594 Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit Un script para explotar CVE-2022-1227. Antecedentes Se recomienda Ubuntu 20.10. Podman TODO: agregar cuál es el principio de esta vulnerabilidad Instalar podman Siga las instrucciones del documento oficial: https://podman.io/getting-started/installationinstalling-on-linux Par...

K000163497: Podman vulnerability CVE-2024-11218

Security Advisory Description A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-6.1.2-1.1.hum1 aarch64, x8664 podman-docker-6.1.2-1.1.hum1 noarch podman-machine-6.1.2-1.1.hum1 aarch64, x8664 podman-remote-6.1.2-1.1.hum1 aarch64, x8664 podmansh-6.1.2-1.1.hum1...

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a use...

AlmaLinux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1784307446)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784307446 advisory. - Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey'...

Rocky Linux 8.8 [CIQ] Security Update: podman / podman-catatonit / podman-catatonit-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0795)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260795 advisory. This advisory aggregates security fixes for the podman SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593,...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1772456640)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772456640 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2024_8039)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248039 advisory. go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34155 encoding/gob:...

AlmaLinux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1782987821)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782987821 advisory. - Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path...