Red Hat Enterprise Linux 8/podman

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37Version ranges need review.	google.golang.org/protobuf/encoding/protojson google.golang.org/protobuf/internal/encoding/json	GoRed Hat	Medium	Fix reported	2026-10-14
Podman: Malformed Image can trick podman run into leaking host environment variables into the containerCVE-2026-57231 · GHSA-4HQ8-GPF5-8P68Version ranges need review.	github.com/containers/libpod github.com/containers/podman/v2	GoRed Hat	High	Fix reported	2026-10-02
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review.	github.com/docker/docker github.com/moby/moby/v2	GoRed Hat	Medium	Fix reported	2026-09-10
Excessive CPU consumption when building archive index in archive/zipCVE-2025-61728 · GO-2026-4342	stdlib Confidential Compute Attestation/openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9	GoRed Hat	Medium	Fix reported	2026-08-08
libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflowCVE-2026-11979	Red Hat Enterprise Linux 6/libxml2 Red Hat Enterprise Linux 7/libxml2	Red Hat	Medium	No fix reported	Not recorded
libxml2: libxml2: NULL pointer dereference parsing nextCatalog without catalog attributeCVE-2026-76781	Red Hat Enterprise Linux 10/podman Red Hat Enterprise Linux 6/libxml2	Red Hat	Medium	No fix reported	Not recorded
podman: buildah: skopeo: containers/storage: Malicious tar whiteout header allows replacement of extraction destination directoryCVE-2026-79699	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/eda-controller-rhel8	Red Hat	Low	No fix reported	Not recorded