p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in python-podman-api

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für python-podman-api: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 12

  1. RLSA-2022:1566

    Mittel · CVSS 5Korrektur verfügbar

    Moderate: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. RLSA-2021:4221

    Mittel · CVSS 5.6Korrektur verfügbar

    Moderate: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. RLSA-2021:2291

    Hoch · CVSS 7.5Korrektur verfügbar

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: vulnerable to symlink exchange attack (CVE-2021-30465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. RLSA-2021:0706

    Hoch · CVSS 7Korrektur verfügbar

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: container users permissions are not respected in privileged containers (CVE-2021-20188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. RLSA-2021:0531

    Mittel · CVSS 5.3Korrektur verfügbar

    Moderate: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API (CVE-2020-14370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. RLSA-2020:4694

    Hoch · CVSS 7.5Korrektur verfügbar

    Moderate: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749) * QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756) * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References s

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. RLSA-2020:3053

    Hoch · CVSS 7Korrektur verfügbar

    Moderate: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. RLSA-2020:1932

    Hoch · CVSS 8.8Korrektur verfügbar

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. RLSA-2020:1931

    Hoch · CVSS 8.8Korrektur verfügbar

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. RLSA-2020:1650

    Hoch · CVSS 7Korrektur verfügbar

    Moderate: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921) * containers/image: Container images read entire image manifest into memory (CVE-2020-1702) * podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the Referenc

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. RLSA-2020:1379

    Mittel · CVSS 5.6Korrektur verfügbar

    Important: container-tools:rhel8 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * useradd and groupadd fail under rootless Buildah and podman [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1] (BZ#1803495) * Podman support for FIPS Mode requires a bind mount inside the container [stream-container-too

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. RLSA-2020:0348

    Mittel · CVSS 5.6Korrektur verfügbar

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

    python-podman-api python-podman-api python-podman-apiBetriebssysteme
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d aktualisieren
    • Auf 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →