https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:45:38.651858+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4694 ALSA-2020:4694 — Moderate: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-04T00:45:38.667303+00:00

Affected: AlmaLinux:8: libslirp, AlmaLinux:8: libslirp-devel, AlmaLinux:8: python-podman-api

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)

* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

* golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-40098 EUVD-2026-40098 2026-10-04T00:45:38.667378+00:00 EUVD-2026-40098 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10749 fkie_cve-2020-10749 2026-10-04T00:45:38.667395+00:00

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

 https://cve.radiocsirt.org/vuln/ghsa-fx6x-h9g4-56f8 GHSA-fx6x-h9g4-56f8 — containernetworking/plugins vulnerable to MitM attacks 2026-10-04T00:45:38.667419+00:00

Affected: Go: github.com/containernetworking/plugins

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

 https://cve.radiocsirt.org/vuln/gsd-2020-10749 gsd-2020-10749 2026-10-04T00:45:38.667441+00:00 gsd-2020-10749 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1049-1 openSUSE-SU-2020:1049-1 — Security update for cni-plugins 2026-10-04T00:45:38.667453+00:00

Security update for cni-plugins

 https://cve.radiocsirt.org/vuln/rhsa-2020:2403 RHSA-2020:2403 — Red Hat Security Advisory: OpenShift Container Platform 4.4.8 containernetworking-plugins security update 2026-10-04T00:45:38.667470+00:00

containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters

 https://cve.radiocsirt.org/vuln/suse-su-2020:1957-1 SUSE-SU-2020:1957-1 — Security update for cni-plugins 2026-10-04T00:45:38.667485+00:00

Security update for cni-plugins

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10749 UBUNTU-CVE-2020-10749 2026-10-04T00:45:38.667499+00:00

Affected: Ubuntu:20.04:LTS: golang-github-containernetworking-plugins

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.