https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:46:36.145380+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:1650 ALSA-2020:1650 — Moderate: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-03T05:46:36.338479+00:00

Affected: AlmaLinux:8: crit, AlmaLinux:8: criu, AlmaLinux:8: python-podman-api, AlmaLinux:8: python3-criu, AlmaLinux:8: slirp4netns, AlmaLinux:8: toolbox, AlmaLinux:8: udica

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation (CVE-2019-19921)

* containers/image: Container images read entire image manifest into memory (CVE-2020-1702)

* podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created (CVE-2020-1726)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03094 bdu:2021-03094 2026-10-03T05:46:36.338561+00:00 bdu:2021-03094 https://cve.radiocsirt.org/vuln/cnvd-2020-35487 cnvd-2020-35487 2026-10-03T05:46:36.338580+00:00 cnvd-2020-35487 https://cve.radiocsirt.org/vuln/euvd-2026-35613 EUVD-2026-35613 2026-10-03T05:46:36.338595+00:00 EUVD-2026-35613 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1702 fkie_cve-2020-1702 2026-10-03T05:46:36.338622+00:00

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.

 https://cve.radiocsirt.org/vuln/ghsa-f6vj-xx8j-fqmq GHSA-f6vj-xx8j-fqmq 2026-10-03T05:46:36.338661+00:00

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.

 https://cve.radiocsirt.org/vuln/gsd-2020-1702 gsd-2020-1702 2026-10-03T05:46:36.338678+00:00 gsd-2020-1702 https://cve.radiocsirt.org/vuln/rhba-2020:0492 RHBA-2020:0492 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.2 bug fix update 2026-10-03T05:46:36.338689+00:00

containers/image: Container images read entire image manifest into memory

 https://cve.radiocsirt.org/vuln/rhsa-2020:1650 RHSA-2020:1650 — Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-03T05:46:36.338706+00:00

runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation containers/image: Container images read entire image manifest into memory podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2982 WID-SEC-W-2023-2982 — Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service 2026-10-03T05:46:36.338727+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift Container Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.