Most recent entries from all

ALSA-2020:1379 — Important: container-tools:rhel8 security and bug fix update

Affected: AlmaLinux:8: cockpit-podman, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: python-podman-api, AlmaLinux:8: slirp4netns, AlmaLinux:8: udica

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* useradd and groupadd fail under rootless Buildah and podman [stream-container-tools-rhel8-rhel-8.1.1] (BZ#1803495)

* Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-rhel8-rhel-8.1.1/buildah] (BZ#1804188)

* Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-rhel8-rhel-8.1.1/podman] (BZ#1804194)

* fuse-overlayfs segfault [stream-container-tools-rhel8-rhel-8.1.1/fuse-overlayfs] (BZ#1805016)

* buildah COPY command is slow when .dockerignore file is not present [stream-container-tools-rhel8-rhel-8.1.1/buildah] (BZ#1806119)

bdu:2020-04502

certfr-2024-avi-0997 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a…

certfr-2024-avi-0997

cnvd-2020-04540

EUVD-2026-38558

fkie_cve-2020-8608

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

GHSA-495h-ww9w-vg4p

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

gsd-2020-8608

RHBA-2020:0527 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.3 packages update

jenkins-git-client-plugin: OS command injection via 'git ls-remote' QEMU: Slirp: potential OOB access due to unsafe snprintf() usages

RHSA-2020:1208 — Red Hat Security Advisory: qemu-kvm security update

QEMU: Slirp: potential OOB access due to unsafe snprintf() usages

SUSE-SU-2020:14396-1 — Security update for kvm

Security update for kvm

UBUNTU-CVE-2020-8608

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:14.04:LTS: slirp, Ubuntu:16.04:LTS: qemu, Ubuntu:16.04:LTS: slirp, Ubuntu:18.04:LTS: qemu, Ubuntu:18.04:LTS: slirp, Ubuntu:20.04:LTS: libslirp, Ubuntu:20.04:LTS: slirp, Ubuntu:20.04:LTS: slirp4netns, Ubuntu:22.04:LTS: slirp and 3 more

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

WID-SEC-W-2024-1982 — QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.