buildah

4 results · Clear filters · Feed

• Low 3.3
  CVE-2026-114236

  Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

  storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat OpenShift Container Platform 4 Linux Azure Linux
  Oct 21, 2026
• Low 3.3
  CVE-2026-39824

  Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

  NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

  golang.org/x/sys golang.org/x/sys/windows katib-suggestion-hyperopt katib-earlystopping Windows Ubuntu Azure Linux Wolfi Go
  May 22, 2026
• Low 3.6
  CVE-2024-45310

  runc can be confused to create empty files/directories on the host

  runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by shar…

  opencontainers runc k3s k3s-static Debian Ubuntu Azure Linux Alpine Wolfi Go
  Sep 3, 2024
• Low 3.0
  CVE-2021-41190

  Clarify Content-Type handling in OCI spec

  The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during…

  opencontainers distribution-spec buildah docker.io Ubuntu Azure Linux Alpine Go
  Nov 17, 2021