p PatchFirst

PatchFirst · Latest vulnerabilities

oci-seccomp-bpf-hook vulnerabilities

Vulnerabilities published for oci-seccomp-bpf-hook in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 44

  1. RLSA-2026:38504

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the Refere

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    • Update to 0:1.2.10-1.module+el8.10.0+40133+32c21f88
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. RLSA-2026:35833

    High · CVSS 8.7Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to i

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    • Update to 0:1.2.10-1.module+el8.10.0+40133+32c21f88
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. RLSA-2026:33722

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) * github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986) * crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * crypto/x509: crypto/tls: golang: Go: Denial of

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    • Update to 0:1.2.10-1.module+el8.10.0+40133+32c21f88
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. RLSA-2026:4672

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. RLSA-2026:3428

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) l

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  6. RLSA-2026:0753

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. RLSA-2025:23374

    High · CVSS 7.5Fix available

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    • Update to 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. RLSA-2025:23543

    High · CVSS 8.2Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  9. RLSA-2025:15904

    High · CVSS 8.1Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: Podman kube play command may overwrite host files (CVE-2025-9566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  10. RLSA-2025:21232

    High · CVSS 8.2Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: container escape via 'masked path' abuse due to mount race conditions (CVE-2025-31133) * runc: container escape with malicious config due to /dev/console mount and related races (CVE-2025-52565) * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  11. RLSA-2023:6938

    Critical · CVSS 9.8Fix available

    Moderate: container-tools:4.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064) * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) * net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723) * golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) * golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) * golang.org/x/net/htm

    oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.5-2.module+el8.9.0+1445+07728297
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  12. RLSA-2023:2802

    High · CVSS 7.5Fix available

    Moderate: container-tools:4.0 security and bug fix update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705) * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630) * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) * golang: path/filepath: stack exhaustion in Glob (CVE-2022-

    oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.5-2.module+el8.9.0+1445+07728297
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  13. RLSA-2025:9142

    Medium · CVSS 5.4Fix available

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * net/http: Request smuggling due to acceptance of invalid chunked data in net/http (CVE-2025-22871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  14. RLSA-2025:3210

    High · CVSS 7.5Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  15. RLSA-2025:10551

    High · CVSS 8.3Fix available

    Important: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: podman missing TLS verification (CVE-2025-6032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    • Update to 0:1.2.10-1.module+el8.10.0+2001+6a33db9f
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  16. RLSA-2024:6969

    High · CVSS 7.5Fix available

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784) * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including t

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  17. RLSA-2024:4246

    Medium · CVSS 5.9Fix available

    Moderate: container-tools security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  18. RLSA-2024:2988

    High · CVSS 7.5Fix available

    Moderate: container-tools:rhel8 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect (CVE-2018-25091) * golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198) * golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558) * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable

    oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hook oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.10-1.module+el8.10.0+1815+5fe7415e
    • Update to 0:1.2.10-1.module+el8.10.0+1825+623b0c20
    • Update to 0:1.2.10-1.module+el8.10.0+1843+6892ab28
    • Update to 0:1.2.10-1.module+el8.10.0+1872+2e18eb19
    • Update to 0:1.2.10-1.module+el8.10.0+1874+ce489889
    • Update to 0:1.2.10-1.module+el8.10.0+1880+8e896d1b
    • Update to 0:1.2.10-1.module+el8.10.0+1896+b18fa106
    • Update to 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  19. RLSA-2024:0748

    High · CVSS 8.6Fix available

    Important: container-tools:4.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * runc: file descriptor leak ("Leaky Vessels") (CVE-2024-21626) A Rocky Enterprise Software Foundation Security Bulletin which addresses further details about the Leaky Vessels flaw is available in the References section. * golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326) * golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287) For more details about the security issue(s), including the impact, a CVSS scor

    oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.5-2.module+el8.9.0+1445+07728297
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  20. RLSA-2024:0121

    High · CVSS 7.5Fix available

    Moderate: container-tools:4.0 security update

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) * golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409) * golang: html/template: improper handling of HTML-l

    oci-seccomp-bpf-hookOperating systems
    • Update to 0:1.2.5-2.module+el8.9.0+1445+07728297
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →