podman vulnerabilities (SUSE)
552 vulnerabilities.
podmanSUSEnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke9.8 CriticalpodmanSUSEnfsd: fix cpntf publish race in nfs4_init_cp_state7.5 HighpodmanSUSEnfsd: fix nfsd_file leak on inter-server COPY setup failure7.5 HighpodmanSUSEnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 CriticalpodmanSUSEnfsd: fix XDR padding calculation in ff_encode_getdeviceinfo5.3 MediumpodmanSUSEnfsd: gate nfs2 setacl by argp->mask9.1 CriticalpodmanSUSEnfsd: gate nfs3 setacl by argp->mask9.1 CriticalpodmanSUSEnfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE8.2 HighpodmanSUSEnfsd: revoke copy-notify stateids before dropping their reference8.8 HighpodmanSUSENFSD: Prevent lock owner use-after-free during client teardown9.8 CriticalpodmanSUSEbtrfs: fix extent map leak in NOCOW direct I/O write5.7 MediumpodmanSUSEsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions7.8 HighpodmanSUSEsmb: client: clear ce->tgthint in free_tgts()9.8 CriticalpodmanSUSEsmb: client: reject a tree connect response whose byte count is too small9.1 CriticalpodmanSUSEecryptfs: hold msg ctx list lock when cleaning daemon queue7.8 HighpodmanSUSEIn the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass...8.4 HighpodmanSUSEbpf: Disable preemption in __bpf_get_stack7.8 HighpodmanSUSEBluetooth: RFCOMM: serialize security confirmation handling8.8 HighpodmanSUSEip: orphan prefetched skbs before multicast forwarding7.8 HighpodmanSUSESUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow9.8 CriticalpodmanSUSESUNRPC: svcauth_gss: enforce krb5 token minimum length9.8 CriticalpodmanSUSESUNRPC: always drain cache_cleaner before destroying a cache_detail7.8 HighpodmanSUSESUNRPC: Check svc pool percpu counter allocation8.1 HighpodmanSUSESUNRPC: fix gssx_dec_option_array error path bugs7.5 HighpodmanSUSESUNRPC: harden gss_krb5_unwrap_v2 against short tokens9.8 CriticalpodmanSUSESUNRPC: harden gss_unwrap_resp_priv length checks9.8 CriticalpodmanSUSEsunrpc: init gssp_lock before publishing proc entry7.8 HighpodmanSUSESUNRPC: reject duplicate CREDS_VALUE optionsNo scorepodmanSUSESUNRPC: Reject krb5 v2 wrap tokens with oversized ec field9.8 CriticalpodmanSUSESUNRPC: wait for in-flight client TLS handshake callback9.8 CriticalpodmanSUSEsvcrdma: Fix offset arithmetic in read_chunk_range9.8 CriticalpodmanSUSEsvcrdma: Fix pcl_for_each_segment for empty chunks9.1 CriticalpodmanSUSEsvcrdma: Reject connection when transport allocation fails8.2 HighpodmanSUSEudf: reject VAT indexes equal to the entry count7.1 HighpodmanSUSEqede: Fix NULL pointer dereference in TPA fragment processing7.5 HighpodmanSUSERDMA/cxgb4: Cancel reg_work before freeing device on remove7.8 HighpodmanSUSERDMA/ucma: Lock the handler in ucma_set_ib_path()7.8 HighpodmanSUSElockd: pin next file across nlm_inspect_file lock-drop9.8 CriticalpodmanSUSEnvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone9.8 CriticalpodmanSUSEnvme-tcp: fix host memory disclosure on R2T for a read command7.5 HighpodmanSUSEnvme-tcp: reject a read that transferred too few bytes7.5 HighpodmanSUSEsctp: stop processing a packet once its association is deleted9.8 CriticalpodmanSUSEsctp: fix NULL deref on untransmitted RECONF completion7.5 HighpodmanSUSEiommu/sva: Set handle->dev before the SVA handle is visible5.7 MediumpodmanSUSEiommu/vt-d: Force requesting ACS when tboot is enabled9.3 CriticalpodmanSUSEslip: fix use-after-free in sl_sync()7.8 HighpodmanSUSEnet: tun: bound receive headroom7.8 HighpodmanSUSEnet/smc: fix socket refcount leak in smc_switch_conns()No scorepodmanSUSEseg6: reset IP6CB after IPv6 decapsulation9.8 CriticalpodmanSUSEvsock/virtio: flush works in dependency order8.4 High- Show moreLoading…