A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildah-testsUpgrade skopeo-testsUpgrade criu-libsUpgrade python3-criuUpgrade crunUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-testsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade criu-develUpgrade critUpgrade aardvark-dnsUpgrade libslirp-develUpgrade udicaUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade buildahUpgrade python3-podmanUpgrade runcUpgrade podmanUpgrade conmonUpgrade podman-dockerUpgrade criuUpgrade toolbox-testsUpgrade toolboxUpgrade podman-pluginsUpgrade netavarkUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade skopeo | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade podman | Oct 1, 2024 | Apr 29, 2022 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade podman-testsUpgrade criu-debuginfoUpgrade conmonUpgrade cockpit-podmanUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade python3-podmanUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade containers-commonUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade podman-debugsourceUpgrade criu-libsUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade podman-debuginfoUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade udicaUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade critUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade netavarkUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade conmon-debugsourceUpgrade skopeoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade podmanUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade podman-gvproxy-debuginfo | May 13, 2022 | Apr 29, 2022 |
| Debian | — | Upgrade libpodUpgrade golang-github-containers-psgo | Jul 30, 2024 | Apr 29, 2022 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade python3-criuUpgrade runcUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade critUpgrade podman-pluginsUpgrade podman-dockerUpgrade criu-develUpgrade udicaUpgrade container-selinuxUpgrade crunUpgrade cockpit-podmanUpgrade criuUpgrade criu-libsUpgrade aardvark-dnsUpgrade buildahUpgrade python3-podmanUpgrade buildah-testsUpgrade podmanUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade netavarkUpgrade podman-gvproxyUpgrade containers-commonUpgrade skopeoUpgrade podman-catatonitUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade conmon | May 18, 2022 | Jul 15, 2021 |
| Redhat Openshift | — | Upgrade podman | May 30, 2022 | Jul 15, 2021 |
| Redhat_linux | — | Upgrade crun-debuginfoUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade udicaUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade libslirp-debugsourceUpgrade runcUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-remoteUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade libslirpUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade critUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade podman-debugsourceUpgrade toolbox-testsUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade python3-podmanUpgrade criu-libsUpgrade podman-catatonitUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade containers-commonUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade criuUpgrade crunUpgrade fuse-overlayfs-debuginfoNo solution existsUpgrade slirp4netns-debugsourceUpgrade toolboxUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon | May 13, 2022 | Apr 29, 2022 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade netavarkUpgrade conmon-debuginfoUpgrade runcUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade python3-criuUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade toolbox-debugsourceUpgrade libslirpUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade critUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade conmonUpgrade crunUpgrade criuUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade buildahUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade toolboxUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-develUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade skopeo | Mar 5, 2024 | Apr 29, 2022 |
| Suse | — | Upgrade podmanUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-cni-config | Oct 26, 2022 | Apr 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub