CVE-2024-9341 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...

CVE-2022-32149 affecting package cri-o for versions less than 1.22.3-8

CVE-2022-32149 affecting package cri-o for versions less than 1.22.3-8. A patched version of the package is available...

RHSA-2020:2776 Red Hat Security Advisory: OpenShift Container Platform 4.2.36 cri-o security update

Bulletin has no description...

RHSA-2019:3812 Red Hat Security Advisory: OpenShift Container Platform 3.9 cri-o security update

Bulletin has no description...

RHSA-2020:1937 Red Hat Security Advisory: OpenShift Container Platform 4.4.3 cri-o security update

Bulletin has no description...

AZL-48525 CVE-2024-45310 affecting package cri-o 1.30.1-1

runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers an...

CVE-2024-6104 affecting package cri-o for versions less than 1.22.3-6

CVE-2024-6104 affecting package cri-o for versions less than 1.22.3-6. A patched version of the package is available...

GO-2022-1206 CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o

CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o...

GO-2022-1147 containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd...

GO-2022-1014 CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o

CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o...

GO-2022-0608 Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o

Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o...

GO-2022-0482 containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd...

GO-2022-0480 Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o

Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o...

GO-2022-0426 Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o

Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o...

GO-2022-0344 containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd...

GO-2022-0354 Code Injection in CRI-O in github.com/cri-o/cri-o

Code Injection in CRI-O in github.com/cri-o/cri-o...

GO-2022-0363 Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o

Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o...

Security Bulletin: Vulnerability in CRI-O affects watsonx.data

Summary CRI-O could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by an arbitrary systemd property injection. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-3154 DESCRIPTION: CRI-O could allow a remote authenticated attacker to...

CBL Mariner 2.0 Security Update: cf-cli / cri-o / gh / libcontainers-common (CVE-2021-43565)

The version of cf-cli / cri-o / gh / libcontainers-common installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43565 advisory. - The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of...

CVE-2021-43565 affecting package cri-o for versions less than 1.22.3-5

CVE-2021-43565 affecting package cri-o for versions less than 1.22.3-5. A patched version of the package is available...