p PatchFirst

PatchFirst · Latest vulnerabilities

cockpit-podman vulnerabilities · Page 3

Vulnerability published for cockpit-podman in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 52

  1. RLSA-2022:1565

    Medium · CVSS 5Fix available

    Moderate: container-tools:3.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * 3.0 stable stream: podman run --pid=host command causes OCI permission error (BZ#2070961)

    cockpit-podman cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:29-2.module+el8.4.0+556+40122d08
    • Update to 0:29-2.module+el8.5.0+709+440d5e7e
    • Update to 0:29-2.module+el8.6.0+783+10209741
    • Update to 0:29-2.module+el8.7.0+1076+9b1c11c1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. RLSA-2021:4222

    Medium · CVSS 5.6Fix available

    Moderate: container-tools:3.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

    cockpit-podman cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:29-2.module+el8.4.0+556+40122d08
    • Update to 0:29-2.module+el8.5.0+709+440d5e7e
    • Update to 0:29-2.module+el8.6.0+783+10209741
    • Update to 0:29-2.module+el8.7.0+1076+9b1c11c1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. RLSA-2021:4221

    Medium · CVSS 5.6Fix available

    Moderate: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

    cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:11-1.module+el8.4.0+559+c02fa3b2
    • Update to 0:11-1.module+el8.5.0+708+6758137d
    • Update to 0:11-1.module+el8.5.0+770+e2f49861
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. RLSA-2021:4154

    Medium · CVSS 6.5Fix available

    Moderate: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602) * containers/storage: DoS via malicious image (CVE-2021-20291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

    cockpit-podmanOperating systems
    • Update to 0:33-1.module+el8.5.0+710+4c471e88
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. RLSA-2021:2371

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: vulnerable to symlink exchange attack (CVE-2021-30465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cockpit-podman cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:29-2.module+el8.4.0+556+40122d08
    • Update to 0:29-2.module+el8.5.0+709+440d5e7e
    • Update to 0:29-2.module+el8.6.0+783+10209741
    • Update to 0:29-2.module+el8.7.0+1076+9b1c11c1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. RLSA-2021:2370

    High · CVSS 7.5Fix available

    Important: container-tools:3.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: vulnerable to symlink exchange attack (CVE-2021-30465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cockpit-podman cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:29-2.module+el8.4.0+556+40122d08
    • Update to 0:29-2.module+el8.5.0+709+440d5e7e
    • Update to 0:29-2.module+el8.6.0+783+10209741
    • Update to 0:29-2.module+el8.7.0+1076+9b1c11c1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. RLSA-2021:2291

    High · CVSS 7.5Fix available

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: vulnerable to symlink exchange attack (CVE-2021-30465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:11-1.module+el8.4.0+559+c02fa3b2
    • Update to 0:11-1.module+el8.5.0+708+6758137d
    • Update to 0:11-1.module+el8.5.0+770+e2f49861
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. RLSA-2021:1796

    High · CVSS 7.5Fix available

    Moderate: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652) * podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes link

    cockpit-podman cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:29-2.module+el8.4.0+556+40122d08
    • Update to 0:29-2.module+el8.5.0+709+440d5e7e
    • Update to 0:29-2.module+el8.6.0+783+10209741
    • Update to 0:29-2.module+el8.7.0+1076+9b1c11c1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. RLSA-2021:0706

    High · CVSS 7Fix available

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: container users permissions are not respected in privileged containers (CVE-2021-20188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:11-1.module+el8.4.0+559+c02fa3b2
    • Update to 0:11-1.module+el8.5.0+708+6758137d
    • Update to 0:11-1.module+el8.5.0+770+e2f49861
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. RLSA-2020:1931

    High · CVSS 8.8Fix available

    Important: container-tools:2.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * buildah: Crafted input tar file may lead to local file overwrite during image build process (CVE-2020-10696) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:11-1.module+el8.4.0+559+c02fa3b2
    • Update to 0:11-1.module+el8.5.0+708+6758137d
    • Update to 0:11-1.module+el8.5.0+770+e2f49861
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. RLSA-2020:1379

    Medium · CVSS 5.6Fix available

    Important: container-tools:rhel8 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * useradd and groupadd fail under rootless Buildah and podman [stream-container-tools-Rocky Linux8-Rocky Linux-8.1.1] (BZ#1803495) * Podman support for FIPS Mode requires a bind mount inside the container [stream-container-too

    cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:11-1.module+el8.4.0+559+c02fa3b2
    • Update to 0:11-1.module+el8.5.0+708+6758137d
    • Update to 0:11-1.module+el8.5.0+770+e2f49861
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. RLSA-2020:0348

    Medium · CVSS 5.6Fix available

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

    cockpit-podman cockpit-podman cockpit-podmanOperating systems
    • Update to 0:11-1.module+el8.4.0+559+c02fa3b2
    • Update to 0:11-1.module+el8.5.0+708+6758137d
    • Update to 0:11-1.module+el8.5.0+770+e2f49861
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →