app-containers

Security Bug Reports

• app-containers/umoci: host file overwrite

  780582 - Assigned to Gentoo Security
• <app-containers/docker-20.10.9: multiple vulnerabilities

  816273 - Assigned to Gentoo Security
• <app-containers/docker-cli-20.10.9: May send credentials to non-chosen registry (CVE-2021-41092)

  816321 - Assigned to Gentoo Security
• <app-containers/runc-1.0.2-r1: Access restriction bypass (CVE-2021-43784)

  828471 - Assigned to Gentoo Security
• <app-containers/podman-3.4.3: insufficient network isolation

  829896 - Assigned to Gentoo Security
• <app-containers/crun-1.4.4: "exec does not set inheritable capabilities"

  835976 - Assigned to Gentoo Security
• <app-containers/runc-1.1.2: incorrect handling of inheritable capabilities

  844085 - Assigned to Gentoo Security
• <app-containers/docker-20.10.22: supplementary groups mishandling

  869407 - Assigned to Gentoo Security
• <app-containers/podman-4.3.0: incorrect handling of supplementary groups

  870931 - Assigned to Gentoo Security
• <app-containers/docker-registry-2.8.1: multiple vulnerabilities

  872410 - Assigned to Gentoo Security
• <app-containers/docker-20.10.22: Git vulnerability mitigations

  877653 - Assigned to Gentoo Security
• app-containers/buildah: multiple vulnerabilities

  884859 - Assigned to Gentoo Security
• <app-containers/docker-20.10.22: multiple vulnerabilities

  886509 - Assigned to Gentoo Security
• <app-containers/lxc-5.0.2: file existence disclosure

  889284 - Assigned to Gentoo Security
• <app-containers/podman-4.5.0: arbitrary host file access

  896372 - Assigned to Gentoo Security
• app-containers/containerd: multiple vulnerabilities

  897960 - Assigned to Gentoo Security
• <app-containers/runc-1.1.5: Privilege escalation bug

  903079 - Assigned to Gentoo Security
• <app-containers/docker-23.0.3: multiple vulnerabilities

  903804 - Assigned to Gentoo Security
• app-containers/docker: vulnerability in bundled buildkit

  905336 - Assigned to Gentoo Security
• <app-containers/podman-4.8.3: Terrapin vulnerability

  921290 - Assigned to Gentoo Security
• <app-containers/runc-1.1.12: container breakout attack

  923434 - Assigned to Gentoo Security
• <app-containers/buildah-1.33.5 multiple vulnerabilities

  923650 - Assigned to Gentoo Security
• <app-containers/podman-4.9.2 multiple vulnerabilities

  923751 - Assigned to Gentoo Security
• app-containers/docker: multiple vulnerabilities

  925022 - Assigned to Gentoo Security
• app-containers/buildah: Denial of Service with invalid JSON input

  927499 - Assigned to Gentoo Security
• <app-containers/podman-{4.9.4,5.0.0}: Denial of Service with invalid JSON input

  927500 - Assigned to Gentoo Security
• <app-containers/podman-{5.0.0,4.9.4}: container escape

  927501 - Assigned to Gentoo Security
• <app-containers/buildah-{1.33.7,1.34.3,1.35.3}: container escape

  927502 - Assigned to Gentoo Security
• <app-containers/distrobox-1.7.0.1: arbitrary code execution via command injection

  927742 - Assigned to Gentoo Security
• <app-containers/apptainer-1.3.0: two DoS vulnerabilities in the bundled library jose

  928121 - Assigned to Gentoo Security