A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.

A flaw was found in Go. When FIPS mode is enabled on a system, contain ...

Important: osbuild-composer security update

ELSA-2024-9473: grafana security update (IMPORTANT)

ELSA-2024-7262: osbuild-composer security update (IMPORTANT)

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Calling Parse on a "// +build" build tag line with deeply nested expre ...

Уязвимость containers-common

Уязвимость podman

Link Following in github.com/containers/common

Уязвимость библиотеки containers-common языка программирования Golang, связанная с неправильным разрешением ссылки перед доступом к файлу, позволяющая нарушителю получить доступ к конфиденциальной информации

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

Уязвимость функции Parse языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании

Security update for podman

Security update for buildah

ELSA-2024-8846: container-tools:ol8 security update (IMPORTANT)

ELSA-2025-7118: osbuild and osbuild-composer security update (IMPORTANT)

Security update for buildah