https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:41:46 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:0922 <p><strong>Affected:</strong> AlmaLinux:9: podman, AlmaLinux:9: podman-docker, AlmaLinux:9: podman-plugins, AlmaLinux:9: podman-remote, AlmaLinux:9: podman-tests</p> <p>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.</p> <p>Security Fix(es):</p> <p>* podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: podman, AlmaLinux:9: podman-docker, AlmaLinux:9: podman-plugins, AlmaLinux:9: podman-remote, AlmaLinux:9: podman-tests</p> <p>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.</p> <p>Security Fix(es):</p> <p>* podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile (CVE-2024-11218)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:0922 https://cve.radiocsirt.org/vuln/bdu:2025-01013 bdu:2025-01013 https://cve.radiocsirt.org/vuln/bdu:2025-01013 https://cve.radiocsirt.org/vuln/bell-cve-2024-11218 <p><strong>Affected:</strong> Alpaquita:23: buildah, Alpaquita:23: podman, Alpaquita:stream: buildah, Alpaquita:stream: podman</p> <p><strong>Affected:</strong> Alpaquita:23: buildah, Alpaquita:23: podman, Alpaquita:stream: buildah, Alpaquita:stream: podman</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-11218 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0370 certfr-2025-avi-0370 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0370 https://cve.radiocsirt.org/vuln/euvd-2026-361948 EUVD-2026-361948 https://cve.radiocsirt.org/vuln/euvd-2026-361948 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11218 <p>A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.</p> <p>A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11218 https://cve.radiocsirt.org/vuln/ghsa-5vpc-35f4-r8w6 <p><strong>Affected:</strong> Go: github.com/containers/buildah</p> <p>### Impact With careful use of the `--mount` flag in RUN instructions in Containerfiles, and by using either multi-stage builds with use of concurrently-executing build stages (e.g., using the `--jobs` CLI flag) or multiple separate but concurrently-executing builds, a malicious Containerfile can be used to expose content from the build host to the command being run using the RUN instruction. This can be used to read or write contents using the privileges of the process which is performing the build. When that process is a root-owned podman system service which is provided for use by unprivileged users, this includes the ability to read and write contents which the client should not be allowed to read and write, including setuid executables in locations where they can be later accessed by unprivileged users.</p> <p>### Patches Patches have been merged to the main branch, and will be added to upcoming releases on the release-1.38, release-1.37, release-1.35, and release-1.33 branches.</p> <p>This addressed a number of Jira cards, but primarily https://issues.redhat.com/browse/RHEL-67616 and https://issues.redhat.com/browse/RHEL-67618, which were then vendored into Podman and backported into olde rbranches.</p> <p>### Workarounds Mandatory access controls should limit the access of the process performing the build, on systems where they are enabled.</p> <p><strong>Affected:</strong> Go: github.com/containers/buildah</p> <p>### Impact With careful use of the `--mount` flag in RUN instructions in Containerfiles, and by using either multi-stage builds with use of concurrently-executing build stages (e.g., using the `--jobs` CLI flag) or multiple separate but concurrently-executing builds, a malicious Containerfile can be used to expose content from the build host to the command being run using the RUN instruction. This can be used to read or write contents using the privileges of the process which is performing the build. When that process is a root-owned podman system service which is provided for use by unprivileged users, this includes the ability to read and write contents which the client should not be allowed to read and write, including setuid executables in locations where they can be later accessed by unprivileged users.</p> <p>### Patches Patches have been merged to the main branch, and will be added to upcoming releases on the release-1.38, release-1.37, release-1.35, and release-1.33 branches.</p> <p>This addressed a number of Jira cards, but primarily https://issues.redhat.com/browse/RHEL-67616 and https://issues.redhat.com/browse/RHEL-67618, which were then vendored into Podman and backported into olde rbranches.</p> <p>### Workarounds Mandatory access controls should limit the access of the process performing the build, on systems where they are enabled.</p> https://cve.radiocsirt.org/vuln/ghsa-5vpc-35f4-r8w6 https://cve.radiocsirt.org/vuln/msrc_cve-2024-11218 msrc_CVE-2024-11218 https://cve.radiocsirt.org/vuln/msrc_cve-2024-11218 https://cve.radiocsirt.org/vuln/oesa-2025-2297 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: buildah</p> <p>The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container&amp;amp;apos;s root file system for manipulation * save container&amp;amp;apos;s root file system layer to create a new image * delete a working container or an image Security Fix(es):</p> <p>A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.(CVE-2024-11218)</p> <p>Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that &amp;quot;A call to this function does not guarantee that the key offered is in fact used to authenticate.&amp;quot; Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make securit…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: buildah</p> <p>The package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container&amp;amp;apos;s root file system for manipulation * save container&amp;amp;apos;s root file system layer to create a new image * delete a working container or an image Security Fix(es):</p> <p>A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.(CVE-2024-11218)</p> <p>Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that &amp;quot;A call to this function does not guarantee that the key offered is in fact used to authenticate.&amp;quot; Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make securit…</p> https://cve.radiocsirt.org/vuln/oesa-2025-2297 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14689-1 <p>podman-5.3.2-1.1 on GA media</p> <p>podman-5.3.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14689-1 https://cve.radiocsirt.org/vuln/rhsa-2025:0830 <p>podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method</p> <p>podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile jinja2: Jinja has a sandbox breakout through malicious filenames jinja2: Jinja has a sandbox breakout through indirect reference to format method</p> https://cve.radiocsirt.org/vuln/rhsa-2025:0830 https://cve.radiocsirt.org/vuln/suse-su-2025:0297-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0297-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11218 <p><strong>Affected:</strong> Ubuntu:25.10: podman, Ubuntu:26.04:LTS: podman</p> <p>A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.</p> <p><strong>Affected:</strong> Ubuntu:25.10: podman, Ubuntu:26.04:LTS: podman</p> <p>A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11218 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0253 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0253