AZL-108390 CVE-2026-94603 affecting package libcontainers-common 20240213-3

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL,...

AZL-107702 CVE-2026-97032 affecting package libcontainers-common 20240213-3

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107709 CVE-2026-78669 affecting package libcontainers-common 20240213-3

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107694 CVE-2026-78659 affecting package libcontainers-common 20240213-3

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107706 CVE-2026-78660 affecting package libcontainers-common 20240213-3

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107712 CVE-2026-78663 affecting package libcontainers-common 20240213-3

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107700 CVE-2026-107324 affecting package libcontainers-common 20240213-3

An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process,...

AZL-107697 CVE-2026-107325 affecting package libcontainers-common 20240213-3

Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...

AZL-107691 CVE-2026-61801 affecting package libcontainers-common 20240213-3

The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...

AZL-103224 CVE-2025-11395 affecting package libcontainers-common 20240213-3

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-99273 CVE-2026-78662 affecting package libcontainers-common 20240213-3

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99270 CVE-2026-56855 affecting package libcontainers-common 20240213-3

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

Azure Linux 3.0 Security Update: libcontainers-common (CVE-2024-1753)

The version of libcontainers-common installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1753 advisory. - A flaw was found in Buildah and subsequently Podman Build which allows containers to mount...

Azure Linux 3.0 Security Update: golang / ig / moby-engine / skopeo (CVE-2022-2879)

The version of golang / ig / moby-engine / skopeo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2879 advisory. - Reader.Read does not set a limit on the maximum size of file headers. A malicious...

Azure Linux 3.0 Security Update: libcontainers-common / telegraf (CVE-2024-37298)

The version of libcontainers-common / telegraf installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37298 advisory. - gorilla/schema converts structs to and from form values. Prior to version 1.4.1...

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3. A patched version of the package is available...

CVE-2024-3727 affecting package libcontainers-common for versions less than 20210626-7

CVE-2024-3727 affecting package libcontainers-common for versions less than 20210626-7. A patched version of the package is available...

CVE-2022-32149 affecting package libcontainers-common for versions less than 20210626-6

CVE-2022-32149 affecting package libcontainers-common for versions less than 20210626-6. A patched version of the package is available...

CVE-2021-43565 affecting package libcontainers-common for versions less than 20210626-5

CVE-2021-43565 affecting package libcontainers-common for versions less than 20210626-5. A patched version of the package is available...

CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4

CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4. A patched version of the package is available...