podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEsctp: fix addr_wq_timer race in sctp_free_addr_wq()7.8 HighpodmanSUSEfs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid4.8 MediumpodmanSUSEHID: bpf: Fix hid_bpf_get_data() range check7.8 HighpodmanSUSEgue: validate REMCSUM private option length9.8 CriticalpodmanSUSEnetfilter: xt_u32: reject invalid shift counts7.8 HighpodmanSUSEnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()6.3 MediumpodmanSUSEnetfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop9.1 CriticalpodmanSUSEnetfilter: xt_connmark: reject invalid shift parameters7.3 HighpodmanSUSEqede: fix off-by-one in BD ring consumption on build_skb failure9.8 CriticalpodmanSUSEnet/tls: Consume empty data records in tls_sw_read_sock()7.5 HighpodmanSUSEperf/x86/amd/core: Avoid enabling BRS from the SVM reload path5.6 MediumpodmanSUSEipv4: igmp: Fix potential UAF in igmp_gq_start_timer()9.8 CriticalpodmanSUSEipv6: mcast: Fix potential UAF in MLD delayed work9.8 CriticalpodmanSUSEipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()5.7 MediumpodmanSUSEvduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iterNo scorepodmanSUSEtipc: restrict socket queue dumps in enqueue tracepoints9.8 CriticalpodmanSUSEnet: atm: reject out-of-range traffic classes in QoS validation7.1 HighpodmanSUSEKVM: Move kvm_io_bus_get_dev() locking responsibilities to callers7.8 HighpodmanSUSEnetfilter: xt_cluster: reject template conntracks in hash match4.8 MediumpodmanSUSEnetfilter: nf_conncount: fix zone comparison in tuple dedup7.5 HighpodmanSUSEselinux: check connect-related permissions on TCP Fast Open8.4 HighpodmanSUSEselinux: avoid sk_socket dereference in selinux_sctp_bind_connect()7.5 HighpodmanSUSEperf/x86/amd/brs: Fix kernel address leakage4.8 MediumpodmanSUSEnvdimm/btt: Free arenas on btt_init() error pathsNo scorepodmanSUSElockd: Plug nlm_file leak when nlm_do_fopen() fails8.7 HighpodmanSUSElockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure8.2 HighpodmanSUSEnet/9p: fix infinite loop in p9_client_rpc on fatal signalNo scorepodmanSUSEocfs2: avoid moving extents to occupied clusters7.8 HighpodmanSUSEocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits5.7 MediumpodmanSUSEocfs2: add journal NULL check in ocfs2_checkpoint_inode()No scorepodmanSUSEnet: thunderbolt: Fix frags[] overflow by bounding frame_count8.8 HighpodmanSUSExen/gntdev: fix error handling in ioctlNo scorepodmanSUSExfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink8.8 HighpodmanSUSEtpm: Make the TPM character devices non-seekable7.8 HighpodmanSUSEnvmet-auth: reject short AUTH_RECEIVE buffers9.8 CriticalpodmanSUSEnvmet-rdma: handle inline data with a nonzero offset9.8 CriticalpodmanSUSEdm thin metadata: fix metadata snapshot consistency on commit failure7.8 HighpodmanSUSEdm era: fix out-of-bounds memory access for non-zero start sector8.8 HighpodmanSUSEdm-ioctl: fix a possible overflow in list_version_get_info9.8 CriticalpodmanSUSEdm_early_create: fix freeing used table on dm_resume failure7.8 HighpodmanSUSEdm-verity: fix buffer overflow in FEC calculation9.8 CriticalpodmanSUSEscsi: xen: scsiback: Free the command tag on the TMR submit-failure path2.1 LowpodmanSUSEscsi: xen: scsiback: Free unsubmitted command instead of double-putting it9.3 CriticalpodmanSUSEscsi: target: Bound PR-OUT TransportID parsing to the received buffer9.8 CriticalpodmanSUSEcpu: hotplug: Bound hotplug states sysfs output7.8 HighpodmanSUSEgpio: tegra: do not call pinctrl for GPIO directionNo scorepodmanSUSEnet: sit: require CAP_NET_ADMIN in the device netns for changelink8.8 HighpodmanSUSEnet: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 HighpodmanSUSEnet: ip_vti: require CAP_NET_ADMIN in the device netns for changelink8.8 HighpodmanSUSEnet: ipip: require CAP_NET_ADMIN in the device netns for changelink8.8 High- Show moreLoading…