Security update for podman

This update for podman fixes the following issues: CVE-2024-9675: Fixed cache arbitrary directory mount bsc1231499. CVE-2024-9407: Fixed improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction bsc1231208. The following non-security bug was fixed: rootless ipv6...

Unauthenticated local file disclosure on Milesight DeviceHub

TL;DR Nginx container on Milesight DeviceHub includes MQTT private key store Can download MQTT private keys across network Milesight eventually responded and issued a firmware update Unauthenticated local file disclosure on Milesight DeviceHub CVSS: 6.5 Medium CVSS:3.1:...

RHBA-2022:0348 Red Hat Bug Fix Advisory: container-tools:3.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2021:4154 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2021:1796 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2020:1926 Red Hat Security Advisory: container-tools:1.0 security and bug fix update

Bulletin has no description...

RHSA-2020:1932 Red Hat Security Advisory: container-tools:rhel8 security update

Bulletin has no description...

RHSA-2020:1931 Red Hat Security Advisory: container-tools:2.0 security update

Bulletin has no description...

[SECURITY] Fedora 41 Update: podman-5.2.5-1.fc41

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

[SECURITY] Fedora 41 Update: containers-common-0.60.4-4.fc41

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...

[SECURITY] Fedora 41 Update: buildah-1.37.5-1.fc41

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

RHSA-2024:7941 Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update

Bulletin has no description...

RHEL 8 / 9 : OpenShift Container Platform 4.13.z (RHSA-2024:7941)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7941 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update

Red Hat OpenShift Container Platform release 4.13.52 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.52 security update

Red Hat OpenShift Container Platform release 4.13.52 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Bug Fix Advisory: LVMS 4.15.8 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.15 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

Important: Red Hat Bug Fix Advisory: Updated rhel9/thunderbird-flatpak container image

An updated rhel9/thunderbird-flatpak container image is now available in the Red Hat container registry. Mozilla Thunderbird is a standalone mail and newsgroup client. Flatpak is a system for running graphical applications as containers. Installing an application as a Flatpak rather than as an...

Important: Red Hat Bug Fix Advisory: Updated rhel9/firefox-flatpak container image

An updated rhel9/firefox-flatpak container image is now available in the Red Hat container registry. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Flatpak is a system for running graphical applications as containers. Installing an...

UUID Attack

github.com/sylabs/sif is vulnerable to UUID attack. The vulnerability is due to insecure randomness in the github.com/satori/go.uuid module, allowing an attacker to predict UUIDs, potentially enabling them to impersonate or manipulate containers...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.1 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...