SUSE-SU-2025:0775-1 Security update for podman

This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE bsc1237641 - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/storage library can cause Denial of Servi...

Important: Red Hat Enhancement Advisory: OpenShift Virtualization 4.17.5 Images

Red Hat OpenShift Virtualization release 4.17.5 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Enhancement Advisory: OpenShift Virtualization 4.14.11 Images

Red Hat OpenShift Virtualization release 4.14.11 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Linux Distros Unpatched Vulnerability : CVE-2020-14370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible...

Linux Distros Unpatched Vulnerability : CVE-2021-20291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked usi...

Linux Distros Unpatched Vulnerability : CVE-2020-1702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using...

The vulnerability of the libavformat library for multiplexing and demultiplexing media containers in the FFmpeg multimedia library allows a attacker to compromise the integrity of the protected information.

The vulnerability of the libavformat library, which is used for multiplexing and demultiplexing media containers in FFmpeg’s multimedia library, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the `avformat_free_context()` function in the libavformat multimedia library of FFmpeg allows attackers to compromise the integrity of protected information.

The vulnerability of the avformatfreecontext function in the library for multiplexing and demultiplexing media containers in the libavformat multimedia library of FFmpeg is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...

Important: Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.5

Updated service-interconnect container images are now available for Service Interconnect 1.5 for RHEL 9. Users of service-interconnect 1.5 rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users of thes...

RHSA-2025:1713 Red Hat Security Advisory: OpenShift Container Platform 4.15.46 packages and security update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.46 packages and security update

Red Hat OpenShift Container Platform release 4.15.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.46 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

DEBIAN-CVE-2025-21713

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attempts to use the same vfio container used by different iommu group, the spaprtcesetwindow returns -EPERM and the subsequent cleanup leads to t...

CVE-2025-21713

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attempts to use the same vfio container used by different iommu group, the spaprtcesetwindow returns -EPERM and the subsequent cleanup leads to t...

CVE-2025-21713 powerpc/pseries/iommu: Don't unset window if it was never set

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attempts to use the same vfio container used by different iommu group, the spaprtcesetwindow returns -EPERM and the subsequent cleanup leads to t...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.46 security and extras update

Red Hat OpenShift Container Platform release 4.15.46 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

PT-2025-8796 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the powerpc/pseries/iommu component. The issue arises when a user attempts to use the same vfio container used ...

RHEL 8 / 9 : OpenShift Container Platform 4.15.46 (RHSA-2025:1713)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1713 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...