podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEi2c: core: fix adapter deregistration race7.8 HighpodmanSUSEhwmon: (lm90) Add lock protection to lm90_alert5.5 MediumpodmanSUSEnet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 HighpodmanSUSEi2c: i801: fix hardware state machine corruption in error path5.5 MediumpodmanSUSESecurity update for podmanNo scorepodmanSUSEtracing: Do not call map->ops->elt_free() if elt_alloc() fails5.5 MediumpodmanSUSEscsi: isci: Fix use-after-free in device removal path7.8 HighpodmanSUSEnet: tls: prevent chain-after-chain in plain text SG9.8 CriticalpodmanSUSEhwmon: (lm90) Stop work before releasing hwmon device4.7 MediumpodmanSUSExfrm: Check for underflow in xfrm_state_mtu7.8 HighpodmanSUSEscsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues7.5 HighpodmanSUSEvxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()9.8 CriticalpodmanSUSEusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers5.5 MediumpodmanSUSEUSB: serial: cypress_m8: fix memory corruption with small endpoint7.8 HighpodmanSUSEnetfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check8.2 HighpodmanSUSEscsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker5.5 MediumpodmanSUSEserial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ7.3 HighpodmanSUSE9p: avoid putting oldfid in p9_client_walk() error path10.0 CriticalpodmanSUSEi2c: core: fix adapter registration race7.8 HighpodmanSUSEserial: 8250_dw: unregister 8250 port if clk_notifier_register() fails9.8 CriticalpodmanSUSESecurity update for podmanNo scorepodmanSUSESecurity update for podmanNo scorepodmanSUSEbtrfs: only release the dirty pages io tree after successful writes7.5 HighpodmanSUSEPodman: Malformed Image can trick podman run into leaking host environment variables into the container7.5 HighpodmanSUSEbpf: Fix ld_{abs,ind} failure path analysis in subprogs7.8 HighpodmanSUSEdm cache: fix dirty mapping checking in passthrough mode switching5.5 MediumpodmanSUSEnetfilter: nf_queue: hold bridge skb->dev while queued7.8 HighpodmanSUSESecurity update for podmanNo scorepodmanSUSESecurity update for podmanNo scorepodmanSUSEPodman: WORKDIR symlink traversal vulnerability5.3 MediumpodmanSUSEnvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free7.5 HighpodmanSUSEtracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()5.5 MediumpodmanSUSEscsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 HighpodmanSUSEnvmet-tcp: fix race between ICReq handling and queue teardown9.8 CriticalpodmanSUSEipmi:ssif: Clean up kthread on errors5.5 MediumpodmanSUSEscsi: smartpqi: Fix memory leak in pqi_report_phys_luns()5.5 MediumpodmanSUSEBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()5.5 MediumpodmanSUSEInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3 MediumpodmanSUSEInvoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh7.5 HighpodmanSUSEInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0 CriticalpodmanSUSEInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 CriticalpodmanSUSEInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh5.3 MediumpodmanSUSEInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1 CriticalpodmanSUSEInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1 CriticalpodmanSUSEInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 CriticalpodmanSUSEInvoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh9.1 CriticalpodmanSUSEInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 CriticalpodmanSUSEInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 HighpodmanSUSEInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 MediumpodmanSUSEInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 Medium- Show moreLoading…