An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are created in a short duration, the environment variables from the first container will get leaked into subsequent containers. An attacker who has control over the subsequent containers could use this flaw to gain access to sensitive information stored in such variables.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade slirp4netnsUpgrade libslirpUpgrade critUpgrade udicaUpgrade criuUpgrade libslirp-develUpgrade python3-criu | May 4, 2022 | Sep 23, 2020 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 23, 2020 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade critUpgrade udicaUpgrade libslirp-debuginfoUpgrade cockpit-podmanUpgrade libslirpUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade buildahUpgrade conmon-debugsourceUpgrade podman-testsUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade runcUpgrade criuUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade python3-criuUpgrade conmonUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade podmanUpgrade toolboxUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-catatonit-debuginfo | Nov 11, 2020 | Sep 23, 2020 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 23, 2020 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade crunUpgrade podman-pluginsUpgrade libslirp-develUpgrade criuUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade udicaUpgrade libslirpUpgrade podman-testsUpgrade podman-catatonitUpgrade podmanUpgrade conmonUpgrade slirp4netnsUpgrade skopeoUpgrade container-selinuxUpgrade python-podman-apiUpgrade podman-dockerUpgrade buildahUpgrade runcUpgrade critUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade containers-commonUpgrade cockpit-podman | Feb 20, 2021 | Sep 22, 2020 |
| Redhat Openshift | — | Upgrade podman | Dec 29, 2020 | Sep 22, 2020 |
| Redhat_linux | — | Upgrade slirp4netns-debuginfoNo solution existsUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade runcUpgrade buildah-debugsourceUpgrade cockpit-podmanUpgrade udicaUpgrade skopeo-testsUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade container-selinuxUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-remoteUpgrade podman-debugsourceUpgrade critUpgrade conmon-debuginfoUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade python-podman-apiUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade crun-debuginfoUpgrade conmonUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade runc-debugsourceUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade containers-commonUpgrade conmon-debugsourceUpgrade toolboxUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfo | Nov 11, 2020 | Sep 23, 2020 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade python3-criuUpgrade criu-debuginfoUpgrade libslirp | Mar 12, 2024 | Sep 23, 2020 |
| Suse | — | Upgrade conmonUpgrade libcontainers-commonUpgrade libseccomp2Upgrade libseccomp-develUpgrade podman-cni-configUpgrade podmanUpgrade libseccomp2-32bitUpgrade libseccomp-tools | Nov 28, 2020 | Sep 23, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub