Debian Golang-Github-Containers-Storage vulnerabilities

CVE-2024-9676 [MEDIUM] CVE-2024-9676: golang-github-containers-storage - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vul... A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The con

CVE-2021-20291 [MEDIUM] CVE-2021-20291: golang-github-containers-storage - A deadlock vulnerability was found in 'github.com/containers/storage' in version... A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream,