AZL-103224 CVE-2025-11395 affecting package libcontainers-common 20240213-3

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-99273 CVE-2026-78662 affecting package libcontainers-common 20240213-3

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99270 CVE-2026-56855 affecting package libcontainers-common 20240213-3

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

Azure Linux 3.0 Security Update: libcontainers-common (CVE-2024-1753)

The version of libcontainers-common installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1753 advisory. - A flaw was found in Buildah and subsequently Podman Build which allows containers to mount...

Azure Linux 3.0 Security Update: libcontainers-common / telegraf (CVE-2024-37298)

The version of libcontainers-common / telegraf installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37298 advisory. - gorilla/schema converts structs to and from form values. Prior to version 1.4.1...

Azure Linux 3.0 Security Update: golang / ig / moby-engine / skopeo (CVE-2022-2879)

The version of golang / ig / moby-engine / skopeo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2879 advisory. - Reader.Read does not set a limit on the maximum size of file headers. A malicious...

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3. A patched version of the package is available...

CVE-2024-3727 affecting package libcontainers-common for versions less than 20210626-7

CVE-2024-3727 affecting package libcontainers-common for versions less than 20210626-7. A patched version of the package is available...

CVE-2022-32149 affecting package libcontainers-common for versions less than 20210626-6

CVE-2022-32149 affecting package libcontainers-common for versions less than 20210626-6. A patched version of the package is available...

CVE-2021-43565 affecting package libcontainers-common for versions less than 20210626-5

CVE-2021-43565 affecting package libcontainers-common for versions less than 20210626-5. A patched version of the package is available...

CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4

CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4. A patched version of the package is available...

CVE-2023-45288 affecting package libcontainers-common for versions less than 20240213-2

CVE-2023-45288 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-1753 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-1753 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2022-2879 affecting package libcontainers-common for versions less than 20240213-2

CVE-2022-2879 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-6104 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-6104 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2

CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2. A patched version of the package is available...

AZL-43071 CVE-2024-37298 affecting package libcontainers-common for versions less than 20210626-4

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...

AZL-43103 CVE-2024-37298 affecting package libcontainers-common for versions less than 20240213-2

gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of...

AZL-42892 CVE-2024-6104 affecting package libcontainers-common for versions less than 20240213-2

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...