CVE-2026-16487 Bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content under default containers policy

A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS...

CVE-2026-16487

A flaw in bootc (part of containers-common ) allows automatic or manual upgrades of mutable image tags to apply unsigned content when using the default containers signature policy. This occurs because certain registries fall through to the insecureAcceptAnything policy. An attacker capable of upd...

K000163668: Go vulnerability CVE-2024-9341

Security Advisory Description A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system int...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0903)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260903 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2022-2989, CVE-2022-2990, CVE-2022-41723...

Rocky Linux 8.8 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0793)

The Rocky Linux 8.8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260793 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.8. It addresses 39 CVEs: CVE-2020-10756, CVE-2021-3592, CVE-2021-3593...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1750783972)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1750783972 advisory. - A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper...

Rocky Linux 8.6 [CIQ] Security Update: containers-common (ciqsa-2026_1084)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261084 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_1311)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261311 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2025-52881, CVE-2025-6032, CVE-2025-9566,...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0848)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260848 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 37 CVEs: CVE-2021-36221, CVE-2021-41190, CVE-2022-170...

Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0023)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260023 advisory. This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 33 CVEs: CVE-2018-25091, CVE-2024-34155,...

Fedora 45 : buildah / containers-common / podman / skopeo (2026-2419096432)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-2419096432 advisory. Automatic update for buildah-1.44.0-1.fc45, podman-6.0.0rc1-1.fc45, skopeo-1.23.0-1.fc45, containers- common-0.68.0-1.fc45. Changelog for buildah Wed May 27...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: containers-common: containers-common-0.67.0-1.1.hum1 noarch containers-common-extra-0.67.0-1.1.hum1 noarch containers-common-0.67.0-1.1.hum1.src src...

MiracleLinux 8 : container-tools:rhel8 (AXSA:2024-9011:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9011:01 advisory. Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library CVE-2024-9341 Buildah: Podman: Improper Input...

MiracleLinux 7 : skopeo-0.1.40-11.0.1.el7.AXS7 (AXSA:2020-198:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-198:02 advisory. containers/image: Container images read entire image manifest into memory CVE-2020-1702 Tenable has extracted the preceding description block directly from th...

MiracleLinux 7 : skopeo-0.1.40-12.0.1.el7.AXS7 (AXSA:2020-902:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-902:03 advisory. golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash CVE-2020-14040 Tenable has extracted the preceding...

container-tools:ol8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/a7f8179 - fixes 'CVE-2025-47913...

Fedora: Security Advisory (FEDORA-2025-b93734b6b8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2025-2259 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

[SECURITY] Fedora 43 Update: containers-common-0.64.2-1.fc43

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...

[SECURITY] Fedora 42 Update: containers-common-0.64.2-1.fc42

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...