Most recent entries from all

ALSA-2019:4269 — Important: container-tools:rhel8 security and bug fix update

Affected: AlmaLinux:8: oci-systemd-hook, AlmaLinux:8: oci-umount

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)

* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)

* runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc (CVE-2019-16884)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* avc: podman run --security-opt label=type:svirt_qemu_net_t (BZ#1764318)

* backport json-file logging support to 1.4.2 (BZ#1770176)

* Selinux won't allow SCTP inter pod communication (BZ#1774382)

bdu:2020-04920

Withdrawn: BELL-CVE-2019-16884 — CVE-2019-16884 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-591 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2022-avi-591

CLEANSTART-2025-LA45180 — runc through 1

Affected: CleanStart: containerd

Security vulnerability affects the containerd package. runc through 1.

EUVD-2026-57977

fkie_cve-2019-16884

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.

GHSA-fgv8-vj5c-2ppq — Incorrect Authorization in runc

Affected: Go: github.com/opencontainers/runc, Go: github.com/opencontainers/selinux

gsd-2019-16884

msrc_CVE-2019-16884 — runc through 1.0.0-rc8 as used in Docker through 19.03.2-ce and other products allows AppArmor restriction bypass becau…

msrc_CVE-2019-16884

openSUSE-SU-2019:2418-1 — Security update for docker-runc

Security update for docker-runc

RHBA-2020:1232 — Red Hat Bug Fix Advisory: runc bug fix update

runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc

SUSE-SU-2019:2786-1 — Security update for docker-runc

Security update for docker-runc

UBUNTU-CVE-2019-16884

Affected: Ubuntu:Pro:16.04:LTS: runc, Ubuntu:18.04:LTS: runc, Ubuntu:20.04:LTS: runc

WID-SEC-W-2022-0510 — IBM DB2: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.