Security
فارسی
All products

Red Hat Enterprise Linux 8/container-tools:2.0/podman

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Podman publishes a malicious image to public registriesCVE-2022-1227 · GHSA-66VW-V2X9-HW75Version ranges need review. github.com/containers/podman/v3github.com/containers/psgo GoRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
Clarify Content-Type handlingCVE-2021-41190 · GHSA-MC8V-MGRF-8F4M github.com/opencontainers/distribution-specRed Hat Enterprise Linux 8/container-tools:2.0/buildah GoRed Hat Low Fix reported
containernetworking/cni improper limitation of path nameCVE-2021-20206 · GHSA-XJQR-G762-PXWPVersion ranges need review. github.com/containernetworking/cniOpenShift Service Mesh 2.0/servicemesh-cni GoRed Hat High Fix reported
Information disclosure in podmanCVE-2020-14370 · GHSA-C3WV-QMJJ-45R6 github.com/containers/libpod/v2github.com/containers/libpod GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
GPGME Go wrapper contains Use After FreeCVE-2020-8945 · GHSA-M6WG-2MWG-4RFQVersion ranges need review. github.com/proglottis/gpgmeRed Hat Enterprise Linux 8/container-tools:1.0/buildah GoRed Hat High Fix reported
podman: Privilege escalation in API componentCVE-2019-25067 Red Hat Enterprise Linux 7/podmanRed Hat Enterprise Linux 8/container-tools:2.0/podman Red Hat Medium No fix reported
containers/image: Container images read entire image manifest into memoryCVE-2020-1702 Red Hat Enterprise Linux 8/container-tools:1.0/buildahRed Hat Enterprise Linux 8/container-tools:1.0/podman Red Hat Low No fix reported
golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tagCVE-2020-28852 OpenShift Service Mesh 2.0/servicemesh-cniRed Hat Advanced Cluster Management for Kubernetes 2/go Red Hat Medium No fix reported
golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extensionCVE-2020-28851 Red Hat Advanced Cluster Management for Kubernetes 2/goRed Hat Ceph Storage 2/golang Red Hat Medium No fix reported