https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:23:54.827220+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1762 ALSA-2022:1762 — Important: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-03T06:23:54.878364+00:00

Affected: AlmaLinux:8: aardvark-dns, AlmaLinux:8: buildah, AlmaLinux:8: buildah-tests, AlmaLinux:8: cockpit-podman, AlmaLinux:8: conmon, AlmaLinux:8: container-selinux, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: containers-common, AlmaLinux:8: crit, AlmaLinux:8: criu and 24 more

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * psgo: Privilege escalation in 'podman top' (CVE-2022-1227) * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03685 bdu:2023-03685 2026-10-03T06:23:54.878470+00:00 bdu:2023-03685 https://cve.radiocsirt.org/vuln/bell-cve-2022-1227 Withdrawn: BELL-CVE-2022-1227 — CVE-2022-1227 does not affect BellSoft software 2026-10-03T06:23:54.878489+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-11600 EUVD-2026-11600 2026-10-03T06:23:54.878505+00:00 EUVD-2026-11600 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1227 fkie_cve-2022-1227 2026-10-03T06:23:54.878516+00:00

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-66vw-v2x9-hw75 GHSA-66vw-v2x9-hw75 — Podman publishes a malicious image to public registries 2026-10-03T06:23:54.878539+00:00

Affected: Go: github.com/containers/podman/v3, Go: github.com/containers/psgo

Podman is a tool for managing OCI containers and pods. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2022-1227 gsd-2022-1227 2026-10-03T06:23:54.878565+00:00 gsd-2022-1227 https://cve.radiocsirt.org/vuln/msrc_cve-2022-1227 msrc_CVE-2022-1227 — A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public… 2026-10-03T06:23:54.878576+00:00 msrc_CVE-2022-1227 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12400-1 openSUSE-SU-2024:12400-1 — podman-4.2.1-2.1 on GA media 2026-10-03T06:23:54.878594+00:00

podman-4.2.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:2190 RHSA-2022:2190 — Red Hat Security Advisory: podman security update 2026-10-03T06:23:54.878612+00:00

psgo: Privilege escalation in 'podman top'

 https://cve.radiocsirt.org/vuln/suse-su-2022:2839-1 SUSE-SU-2022:2839-1 — Security update for podman 2026-10-03T06:23:54.878627+00:00

Security update for podman

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1227 UBUNTU-CVE-2022-1227 2026-10-03T06:23:54.878641+00:00

Affected: Ubuntu:20.04:LTS: golang-github-containers-psgo, Ubuntu:22.04:LTS: golang-github-containers-psgo, Ubuntu:24.04:LTS: golang-github-containers-psgo, Ubuntu:25.10: golang-github-containers-psgo, Ubuntu:26.04:LTS: golang-github-containers-psgo

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.