cockpit-podman vulnerabilities (AlmaLinux)
139 vulnerabilities.
cockpit-podmanAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumcockpit-podmanAlmaLinuxSession tickets lack random ticket_age_add in crypto/tls3.1 Lowcockpit-podmanAlmaLinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 Highcockpit-podmanAlmaLinuxIncorrect Default Permissions in runc5.9 Mediumcockpit-podmanAlmaLinuxcontainer-tools:4.0 bug fix updateNo scorecockpit-podmanAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorecockpit-podmanAlmaLinuxnew module: container-tools:4.0No scorecockpit-podmanAlmaLinuxPodman publishes a malicious image to public registries8.8 Highcockpit-podmanAlmaLinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 Highcockpit-podmanAlmaLinuxPodman's default inheritable capabilities for linux container not empty7.5 Highcockpit-podmanAlmaLinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 Mediumcockpit-podmanAlmaLinuxgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highcockpit-podmanAlmaLinuxUncontrolled Resource Consumption in promhttp7.5 Highcockpit-podmanAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scorecockpit-podmanAlmaLinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 Mediumcockpit-podmanAlmaLinuxcontainer-tools:3.0 bug fix updateNo scorecockpit-podmanAlmaLinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 Mediumcockpit-podmanAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 Highcockpit-podmanAlmaLinuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 Highcockpit-podmanAlmaLinuxnew module: container-tools:3.0No scorecockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scorecockpit-podmanAlmaLinuxImproper Locking in github.com/containers/storage6.5 Mediumcockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecockpit-podmanAlmaLinuxPodman Origin Validation Error5.9 Mediumcockpit-podmanAlmaLinuxIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 Highcockpit-podmanAlmaLinuxgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 Highcockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecockpit-podmanAlmaLinuxGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 Highcockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scorecockpit-podmanAlmaLinuxImproper Authorization in github.com/containers/libpod7.0 Highcockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecockpit-podmanAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecockpit-podmanAlmaLinuxnew module: container-tools:2.0No scorecockpit-podmanAlmaLinuxPath Traversal in Buildah8.8 Highcockpit-podmanAlmaLinuxopencontainers runc contains procfs race condition with a shared volume mount7.0 Highcockpit-podmanAlmaLinuxIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 Mediumcockpit-podmanAlmaLinuxtcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 Mediumcockpit-podmanAlmaLinuxlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 High