podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSESecurity update for podmanNo scorepodmanSUSEnetfilter: nft_payload: fix mask build for partial field offload7.1 HighpodmanSUSEvhost: reset the vring metadata cache on vring reconfiguration8.8 HighpodmanSUSEnetfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH7.1 HighpodmanSUSEscsi: libiscsi: Fix stale-data leak into the SCSI sense buffer7.5 HighpodmanSUSEscsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake raceNo scorepodmanSUSEhwmon: (nct6775-core) Fix number of temperature registers for NCT6116No scorepodmanSUSEBluetooth: ISO: clear iso_data always when detaching conn from hcon8.8 HighpodmanSUSEBluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp8.8 HighpodmanSUSEBluetooth: ISO: fix leaking sk after socket release6.8 MediumpodmanSUSEqede: sync udp_tunnel ports outside qede_lock in the recovery path7.5 HighpodmanSUSEKVM: s390: pci: Reject adapter interrupt forwarding if already enabled8.8 HighpodmanSUSEnet/smc: fix socket use-after-free during link group termination9.8 CriticalpodmanSUSEnetfilter: ipset: do not update comments from kernel-side hash adds8.4 HighpodmanSUSEtipc: avoid use-after-free in poll trace queue dumps8.8 HighpodmanSUSEbinfmt_misc: restore write access when removing an entry4.8 MediumpodmanSUSEbinfmt_misc: reject a flag character as the field delimiter7.1 HighpodmanSUSEnet: bridge: stop fast-leave after deleting a port group9.8 CriticalpodmanSUSEnet: pktgen: fix proc entry use-after-free7.8 HighpodmanSUSEveth: convert frag_list skbs before running XDP9.1 CriticalpodmanSUSEvxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 CriticalpodmanSUSEvxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 CriticalpodmanSUSEtracing: Check return value of __register_event() in trace_module_add_events()7.8 HighpodmanSUSEsctp: prevent peer transport count overflow8.8 HighpodmanSUSEs390/qeth: Check CAP_NET_ADMIN for private ioctls7.8 HighpodmanSUSEnet: openvswitch: fix potential UAF on meter attach failure7.8 HighpodmanSUSEnet: openvswitch: fix skb leak on flow key update failure during ct6.8 MediumpodmanSUSEdrm/vc4: Zero the tile state data array before each BIN job7.8 HighpodmanSUSEdrm/amd/pm: fix pptable use-after-free7.8 HighpodmanSUSEdrm/vmwgfx: validate DRAW_PRIMITIVES header size before division7.8 HighpodmanSUSEdrm/vmwgfx: bound DMA command body size against suffix pointer8.8 HighpodmanSUSEvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().9.8 CriticalpodmanSUSEipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 CriticalpodmanSUSEIB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier7.8 HighpodmanSUSEtracing: Bound synthetic-field strings with seq_bufNo scorepodmanSUSERDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs7.8 HighpodmanSUSERDMA/hns: Fix log flood after cmd_mbox failureNo scorepodmanSUSEALSA: seq: oss: Fix UAF at handling events with embedded SysEx data7.8 HighpodmanSUSEnvmet-tcp: fix page fragment cache leak in error path8.2 HighpodmanSUSEnvmet-tcp: check return value of nvmet_tcp_set_queue_sock7.5 HighpodmanSUSEnvme-multipath: fix flex array size in struct nvme_ns_head9.8 CriticalpodmanSUSEnet/sched: cls_bpf: prevent unbounded recursion in offload rollbackNo scorepodmanSUSERDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe7.8 HighpodmanSUSERDMA/rxe: Copy WQE to local buffer in non-SRQ receive path7.8 HighpodmanSUSEmd/raid10: reset read_slot when reusing r10bio for discard9.8 CriticalpodmanSUSEmd/raid1,raid10: fix deadlock in read error recovery path10.0 CriticalpodmanSUSEnvdimm/btt: Handle preemption in BTT lane acquisition7.3 HighpodmanSUSEbpf: fix UAF by restoring RCU-delayed inode freeing in bpffs7.8 HighpodmanSUSEconfigfs_lookup(): don't leave ->s_dentry dangling on failure7.8 HighpodmanSUSEvhost: fix vhost_get_avail_idx for a non empty ring7.4 High- Show moreLoading…