{
  "cveId": "CVE-2018-25091",
  "url": "https://patchblox.com/security/cve/CVE-2018-25091",
  "summary": "CVE-2018-25091 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2018-25091, released October 15, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "aardvark-dns: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSe...",
  "description": "The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect (CVE-2018-25091)\n\n* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)\n\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n\n* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)\n\n* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)\n\n* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)\n\n* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)\n\n* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)\n\n* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)\n\n* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)\n\n* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\n* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)\n\n* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)\n\n* moby/buildkit: Possible race condition with accessing subpaths from cache mounts (CVE-2024-23650)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.",
  "published": "2023-10-15T12:15:00Z",
  "severity": "Moderate",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00589,
  "epssPercentile": 0.48416,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "aardvark-dns",
      "release": "RHEL 8",
      "fixedVersion": "2:1.10.0-1.module\u002Bel8.10.0\u002B21209\u002B52deeb51",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aardvark-dns",
      "release": "ol 8",
      "fixedVersion": "2:1.10.0-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "aardvark-dns",
      "release": "rocky 8",
      "fixedVersion": "2:1.10.0-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "buildah",
      "release": "RHEL 8",
      "fixedVersion": "2:1.33.6-2.module\u002Bel8.10.0\u002B21371\u002B46937ece",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "buildah",
      "release": "ol 8",
      "fixedVersion": "2:1.33.6-2.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "buildah-tests",
      "release": "RHEL 8",
      "fixedVersion": "2:1.33.6-2.module\u002Bel8.10.0\u002B21371\u002B46937ece",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "buildah-tests",
      "release": "ol 8",
      "fixedVersion": "2:1.33.6-2.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-podman",
      "release": "RHEL 8",
      "fixedVersion": "0:84.1-1.module\u002Bel8.10.0\u002B21373\u002B0d273fdf",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-podman",
      "release": "ol 8",
      "fixedVersion": "0:84.1-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-podman",
      "release": "rocky 8",
      "fixedVersion": "0:84.1-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "conmon",
      "release": "RHEL 8",
      "fixedVersion": "3:2.1.10-1.module\u002Bel8.10.0\u002B21077\u002B98b84d8a",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "conmon",
      "release": "ol 8",
      "fixedVersion": "3:2.1.10-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "conmon",
      "release": "rocky 8",
      "fixedVersion": "3:2.1.10-1.module\u002Bel8.10.0\u002B1896\u002Bb18fa106",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "container-selinux",
      "release": "RHEL 8",
      "fixedVersion": "2:2.229.0-2.module\u002Bel8.10.0\u002B21196\u002B3f0abbca",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "container-selinux",
      "release": "ol 8",
      "fixedVersion": "2:2.229.0-2.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "container-selinux",
      "release": "rocky 8",
      "fixedVersion": "2:2.229.0-2.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "containernetworking-plugins",
      "release": "RHEL 8",
      "fixedVersion": "1:1.4.0-2.module\u002Bel8.10.0\u002B21366\u002Bf9cb49f8",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "containernetworking-plugins",
      "release": "ol 8",
      "fixedVersion": "1:1.4.0-2.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "containernetworking-plugins",
      "release": "rocky 8",
      "fixedVersion": "1:1.4.0-2.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "containers-common",
      "release": "RHEL 8",
      "fixedVersion": "2:1-81.module\u002Bel8.10.0\u002B21340\u002Bc6c7475a",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "containers-common",
      "release": "ol 8",
      "fixedVersion": "2:1-81.0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "containers-common",
      "release": "rocky 8",
      "fixedVersion": "2:1-81.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "crit",
      "release": "RHEL 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "crit",
      "release": "ol 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "criu",
      "release": "RHEL 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "criu",
      "release": "ol 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "criu-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "criu-devel",
      "release": "ol 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "criu-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "criu-libs",
      "release": "ol 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "crun",
      "release": "RHEL 8",
      "fixedVersion": "0:1.14.3-2.module\u002Bel8.10.0\u002B21340\u002Bc6c7475a",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "crun",
      "release": "ol 8",
      "fixedVersion": "0:1.14.3-2.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "crun",
      "release": "rocky 8",
      "fixedVersion": "0:1.14.3-2.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "fuse-overlayfs",
      "release": "RHEL 8",
      "fixedVersion": "0:1.13-1.module\u002Bel8.10.0\u002B20412\u002B95ee28e2",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "fuse-overlayfs",
      "release": "ol 8",
      "fixedVersion": "0:1.13-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "fuse-overlayfs",
      "release": "rocky 8",
      "fixedVersion": "0:1.13-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "libslirp",
      "release": "RHEL 8",
      "fixedVersion": "0:4.4.0-1.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libslirp",
      "release": "ol 8",
      "fixedVersion": "0:4.4.0-1.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libslirp",
      "release": "rocky 8",
      "fixedVersion": "0:4.4.0-1.module\u002Bel8.9.0\u002B1445\u002B07728297",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "libslirp-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.4.0-1.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libslirp-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.4.0-1.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "netavark",
      "release": "RHEL 8",
      "fixedVersion": "2:1.10.3-1.module\u002Bel8.10.0\u002B21306\u002B6be40ce7",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "netavark",
      "release": "ol 8",
      "fixedVersion": "2:1.10.3-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "netavark",
      "release": "rocky 8",
      "fixedVersion": "2:1.10.3-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "oci-seccomp-bpf-hook",
      "release": "RHEL 8",
      "fixedVersion": "0:1.2.10-1.module\u002Bel8.10.0\u002B20565\u002Ba40ba0e5",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "oci-seccomp-bpf-hook",
      "release": "ol 8",
      "fixedVersion": "0:1.2.10-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "oci-seccomp-bpf-hook",
      "release": "rocky 8",
      "fixedVersion": "0:1.2.10-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "podman",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-catatonit",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-catatonit",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-docker",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-docker",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-gvproxy",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-gvproxy",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-plugins",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-plugins",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-remote",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-remote",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-tests",
      "release": "RHEL 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B21350\u002Bea09fba1",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "podman-tests",
      "release": "ol 8",
      "fixedVersion": "3:4.9.4-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-pip",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.1-2.3~ubuntu1.18.04.8\u002Besm2",
      "fix": "python-pip 9.0.1-2.3~ubuntu1.18.04.8\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-pip-9.0.1-2.3-ubuntu1.18.04.8-esm2",
      "released": "2023-10-17T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-pip-whl",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.1-2.3~ubuntu1.18.04.8\u002Besm2",
      "fix": "python-pip-whl 9.0.1-2.3~ubuntu1.18.04.8\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-pip-whl-9.0.1-2.3-ubuntu1.18.04.8-esm2",
      "released": "2023-10-17T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-podman",
      "release": "rocky 8",
      "fixedVersion": "0:4.9.0-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "python-urllib3",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.25.6-4",
      "fix": "DEBIAN-CVE-2018-25091",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2018-25091",
      "released": "2023-10-15T19:15:09Z"
    },
    {
      "platform": "linux",
      "product": "python-urllib3",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.25.6-4",
      "fix": "DEBIAN-CVE-2018-25091",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2018-25091",
      "released": "2023-10-15T19:15:09Z"
    },
    {
      "platform": "linux",
      "product": "python-urllib3",
      "release": "Debian 14",
      "fixedVersion": "1.25.6-4",
      "fix": "DEBIAN-CVE-2018-25091",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2018-25091",
      "released": "2023-10-15T19:15:09Z"
    },
    {
      "platform": "linux",
      "product": "python-urllib3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.22-1ubuntu0.18.04.2\u002Besm1",
      "fix": "python-urllib3 1.22-1ubuntu0.18.04.2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-urllib3-1.22-1ubuntu0.18.04.2-esm1",
      "released": "2023-10-17T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-criu",
      "release": "RHEL 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-criu",
      "release": "ol 8",
      "fixedVersion": "0:3.18-4.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-pip",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.1-2.3~ubuntu1.18.04.8\u002Besm2",
      "fix": "python3-pip 9.0.1-2.3~ubuntu1.18.04.8\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-pip-9.0.1-2.3-ubuntu1.18.04.8-esm2",
      "released": "2023-10-17T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-podman",
      "release": "RHEL 8",
      "fixedVersion": "0:4.9.0-1.module\u002Bel8.10.0\u002B21196\u002B3f0abbca",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-podman",
      "release": "ol 8",
      "fixedVersion": "0:4.9.0-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-urllib3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.22-1ubuntu0.18.04.2\u002Besm1",
      "fix": "python3-urllib3 1.22-1ubuntu0.18.04.2\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-urllib3-1.22-1ubuntu0.18.04.2-esm1",
      "released": "2023-10-17T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "RHEL 8",
      "fixedVersion": "1:1.1.12-1.module\u002Bel8.10.0\u002B21251\u002B62b7388c",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "ol 8",
      "fixedVersion": "1:1.1.12-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "runc",
      "release": "rocky 8",
      "fixedVersion": "1:1.1.12-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "skopeo",
      "release": "RHEL 8",
      "fixedVersion": "2:1.14.3-0.1.module\u002Bel8.10.0\u002B21251\u002B62b7388c",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "skopeo",
      "release": "ol 8",
      "fixedVersion": "2:1.14.3-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "skopeo-tests",
      "release": "RHEL 8",
      "fixedVersion": "2:1.14.3-0.1.module\u002Bel8.10.0\u002B21251\u002B62b7388c",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "skopeo-tests",
      "release": "ol 8",
      "fixedVersion": "2:1.14.3-0.1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "slirp4netns",
      "release": "RHEL 8",
      "fixedVersion": "0:1.2.3-1.module\u002Bel8.10.0\u002B21306\u002B6be40ce7",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "slirp4netns",
      "release": "ol 8",
      "fixedVersion": "0:1.2.3-1.module\u002Bel8.10.0\u002B90298\u002B77a9814d",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "slirp4netns",
      "release": "rocky 8",
      "fixedVersion": "0:1.2.3-1.module\u002Bel8.10.0\u002B1815\u002B5fe7415e",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "toolbox",
      "release": "RHEL 8",
      "fixedVersion": "0:0.0.99.5-2.module\u002Bel8.10.0\u002B21341\u002Bff0b5f89",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "toolbox",
      "release": "rocky 8",
      "fixedVersion": "0:0.0.99.5-2.module\u002Bel8.10.0\u002B1815\u002B5fe7415e.rocky.0.2.rocky.0.2",
      "fix": "RLSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-2988",
      "released": "2025-05-07T19:11:47Z"
    },
    {
      "platform": "linux",
      "product": "toolbox-tests",
      "release": "RHEL 8",
      "fixedVersion": "0:0.0.99.5-2.module\u002Bel8.10.0\u002B21341\u002Bff0b5f89",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "udica",
      "release": "RHEL 8",
      "fixedVersion": "0:0.2.6-20.module\u002Bel8.9.0\u002B20326\u002B387084d0",
      "fix": "RHSA-2024:2988",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-2988",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "udica",
      "release": "ol 8",
      "fixedVersion": "0:0.2.6-20.module\u002Bel8.9.0\u002B90147\u002Ba4870853",
      "fix": "ELSA-2024-2988",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-2988",
      "released": "2024-05-24T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}