The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade criu-develUpgrade podman-pluginsUpgrade python3-criuUpgrade podman-dockerUpgrade podman-remoteUpgrade libslirp-develUpgrade skopeo-testsUpgrade buildah-testsUpgrade criu-libsUpgrade podman-testsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade buildahUpgrade skopeoUpgrade podmanUpgrade criuUpgrade libslirp | May 4, 2022 | Apr 1, 2021 |
| Centos_linux | — | Upgrade toolbox-debugsourceUpgrade criuUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade toolboxUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade crunUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade skopeoUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade runc-debugsourceUpgrade podman-dockerUpgrade podman-remoteUpgrade critUpgrade runcUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade python3-criuUpgrade libslirpUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade toolbox-debuginfoUpgrade criu-libsUpgrade containers-commonUpgrade podman-debuginfoUpgrade libslirp-develUpgrade container-selinuxUpgrade cockpit-podmanUpgrade udica | Nov 10, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade golang-github-containers-storage | Jul 30, 2024 | Apr 1, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade python3-podmanUpgrade libslirpUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade buildah-testsUpgrade skopeoUpgrade podman-catatonitUpgrade podmanUpgrade podman-gvproxyUpgrade buildahUpgrade criuUpgrade podman-testsUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade conmonUpgrade criu-develUpgrade podman-remoteUpgrade libslirp-develUpgrade udicaUpgrade crunUpgrade container-selinuxUpgrade containers-commonUpgrade runcUpgrade criu-libs | Nov 22, 2022 | Apr 1, 2021 |
| Redhat Openshift | — | Upgrade openshift-ansibleUpgrade python-oslo-i18nUpgrade atomic-openshift-service-idlerUpgrade python-oslo-policyUpgrade python-ironic-prometheus-exporterUpgrade ironic-images-ipa-x86_64Upgrade python-oslo-utilsUpgrade jenkinsUpgrade toolboxUpgrade haproxyUpgrade ironic-images-ipa-ppc64leUpgrade jenkins-2-pluginsUpgrade python-oslo-configUpgrade ironic-imagesUpgrade openshiftUpgrade python-eventletUpgrade openshift-clientsUpgrade butaneUpgrade python-pyrsistentUpgrade ignitionUpgrade ovn2.13Upgrade python-keystoneauth1Upgrade python-toozUpgrade python-oslo-concurrencyUpgrade openshift-kuryrUpgrade kata-containersUpgrade python-hardwareUpgrade python-oslo-dbUpgrade podmanUpgrade python-stevedoreUpgrade python-oslo-upgradecheckUpgrade redhat-release-coreosUpgrade ostreeUpgrade python-openshiftUpgrade python-jsonschemaUpgrade python-sushy-oem-idracUpgrade coreos-installerUpgrade openvswitch2.15Upgrade python-oslo-contextUpgrade rteval-loadsUpgrade python-sushyUpgrade openstack-ironicUpgrade openstack-ironic-inspectorUpgrade python-ironic-libUpgrade python-oslo-serviceUpgrade python-openstacksdkUpgrade cri-oUpgrade python-oslo-logUpgrade openstack-ironic-python-agentUpgrade python-debtcollectorUpgrade console-login-helper-messagesUpgrade python-oslo-serializationUpgrade runcUpgrade cri-toolsUpgrade python-kubernetesUpgrade rust-afterburn | Apr 21, 2021 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade udicaUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoNo solution existsUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade container-selinuxUpgrade buildahUpgrade buildah-debugsourceUpgrade criu-debugsourceUpgrade runcUpgrade containernetworking-pluginsUpgrade critUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade podman-catatonitUpgrade podmanUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade toolbox-debugsourceUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade buildah-testsUpgrade podman-testsUpgrade cockpit-podmanUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade libslirpUpgrade criu-debuginfoUpgrade podman-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade criu-develUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook | Nov 10, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade skopeo-debugsourceUpgrade skopeoUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade runcUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade crunUpgrade libslirp-debugsourceUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade podman-catatonitUpgrade criu-develUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade buildah-debuginfoUpgrade libslirpUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-testsUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox | Mar 12, 2024 | Apr 1, 2021 |
| Suse | — | Upgrade libseccomp-toolsUpgrade podmanUpgrade conmonUpgrade libseccomp2Upgrade podman-cni-configUpgrade libseccomp2-32bitUpgrade libseccomp-develUpgrade libcontainers-common | Mar 5, 2022 | Apr 1, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 1, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub