p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in containernetworking-plugins

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für containernetworking-plugins: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 49

  1. RLSA-2026:38504

    Hoch · CVSS 7.5Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the Refere

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-8.module+el8.10.0+40133+32c21f88 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. RLSA-2026:35833

    Hoch · CVSS 8.7Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to i

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-8.module+el8.10.0+40133+32c21f88 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. RLSA-2026:33722

    Hoch · CVSS 7.5Korrektur verfügbar

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-8.module+el8.10.0+40133+32c21f88 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. RLSA-2026:3428

    Hoch · CVSS 7.5Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) l

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-7.module+el8.10.0+40087+cfe9c127 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. RLSA-2026:0753

    Hoch · CVSS 7.5Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-plugins containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    • Auf 1:1.4.0-6.module+el8.10.0+40047+0c0a73f4 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. RLSA-2025:23374

    Hoch · CVSS 7.5Korrektur verfügbar

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-plugins containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    • Auf 1:1.4.0-6.module+el8.10.0+40047+0c0a73f4 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. RLSA-2025:23543

    Hoch · CVSS 8.2Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. RLSA-2025:15904

    Hoch · CVSS 8.1Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. RLSA-2025:21232

    Hoch · CVSS 8.2Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133) * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565) * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. RLSA-2023:6938

    Kritisch · CVSS 9.8Korrektur verfügbar

    Moderate: container-tools:4.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064) * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang.org/x/net/htm

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.1.1-5.module+el8.9.0+1445+07728297 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. RLSA-2025:9142

    Mittel · CVSS 5.4Korrektur verfügbar

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net/http: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. RLSA-2025:3210

    Hoch · CVSS 7.5Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-plugins containernetworking-plugins containernetworking-plugins containernetworking-plugins containernetworking-plugins containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-5.module+el8.10.0+1843+6892ab28 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1872+2e18eb19 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1874+ce489889 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1880+8e896d1b aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1896+b18fa106 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1948+4b5cd4a9 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. RLSA-2025:10551

    Hoch · CVSS 8.3Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: podman missing TLS verification (CVE-2025-6032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-6.module+el8.10.0+2001+6a33db9f aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. RLSA-2024:6969

    Hoch · CVSS 7.5Korrektur verfügbar

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including t

    containernetworking-plugins containernetworking-plugins containernetworking-plugins containernetworking-plugins containernetworking-plugins containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-5.module+el8.10.0+1843+6892ab28 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1872+2e18eb19 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1874+ce489889 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1880+8e896d1b aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1896+b18fa106 aktualisieren
    • Auf 1:1.4.0-5.module+el8.10.0+1948+4b5cd4a9 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. RLSA-2024:4246

    Mittel · CVSS 5.9Korrektur verfügbar

    Moderate: container-tools security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-plugins containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-2.module+el8.10.0+1815+5fe7415e aktualisieren
    • Auf 1:1.4.0-2.module+el8.10.0+1825+623b0c20 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. RLSA-2024:2988

    Hoch · CVSS 7.5Korrektur verfügbar

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect (CVE-2018-25091) * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) * golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558) * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable

    containernetworking-plugins containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-2.module+el8.10.0+1815+5fe7415e aktualisieren
    • Auf 1:1.4.0-2.module+el8.10.0+1825+623b0c20 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. RLSA-2025:1372

    Nicht bewertetKorrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-5.module+el8.10.0+1843+6892ab28 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. RLSA-2024:10289

    Nicht bewertetKorrektur verfügbar

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) * podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024) * Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s)

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-5.module+el8.10.0+1843+6892ab28 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. RLSA-2024:8846

    Nicht bewertetKorrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) * Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) * buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-5.module+el8.10.0+1843+6892ab28 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. RLSA-2024:8038

    Nicht bewertetKorrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) * go/build/constraint: golang: Calling Parse on a "// +build" build tag line wit

    containernetworking-pluginsBetriebssysteme
    • Auf 1:1.4.0-5.module+el8.10.0+1843+6892ab28 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →