A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade critUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade toolbox-testsUpgrade udicaUpgrade buildahUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade libslirpUpgrade slirp4netnsUpgrade runcUpgrade netavarkUpgrade conmonUpgrade podman-testsUpgrade python3-criuUpgrade podman-gvproxyUpgrade podman-dockerUpgrade criuUpgrade container-selinuxUpgrade podman-remoteUpgrade criu-libsUpgrade skopeoUpgrade containers-commonUpgrade python3-podmanUpgrade toolboxUpgrade podmanUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade crunUpgrade skopeo-testsUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade libslirp-devel | May 4, 2022 | Apr 4, 2022 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Apr 4, 2022 |
| Centos_linux | — | Upgrade criu-libsUpgrade podman-testsUpgrade podmanUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade skopeoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade conmonUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debugsourceUpgrade podman-pluginsUpgrade toolbox-testsUpgrade containers-commonUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade criuUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade libslirp-debuginfoUpgrade python-podman-apiUpgrade podman-debuginfoUpgrade criu-develUpgrade skopeo-debuginfoUpgrade udicaUpgrade crun-debuginfoUpgrade crunUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade critUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debuginfoUpgrade runcUpgrade podman-remoteUpgrade criu-debugsourceUpgrade container-selinuxUpgrade aardvark-dns | Apr 27, 2022 | Apr 4, 2022 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Apr 4, 2022 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade critUpgrade conmonUpgrade container-selinuxUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade podman-dockerUpgrade criuUpgrade podman-pluginsUpgrade python3-podmanUpgrade podman-testsUpgrade slirp4netnsUpgrade python-podman-apiUpgrade criu-develUpgrade crunUpgrade podman-catatonitUpgrade libslirpUpgrade udicaUpgrade runcUpgrade containers-commonUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade buildah-testsUpgrade skopeoUpgrade podman-remoteUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade netavarkUpgrade buildahUpgrade criu-libsUpgrade libslirp-develUpgrade fuse-overlayfs | Apr 29, 2022 | Mar 30, 2022 |
| Redhat_linux | — | Upgrade python-podman-apiUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade podman-remoteUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade criu-libs-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade container-selinuxUpgrade criu-develUpgrade cockpit-podmanUpgrade toolbox-debugsourceUpgrade buildahUpgrade critUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade skopeo-debuginfoUpgrade toolbox-testsUpgrade podman-catatonitUpgrade podman-testsUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade criu-libsUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade crunUpgrade fuse-overlayfsUpgrade podmanUpgrade criuUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade podman-pluginsUpgrade toolboxUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netns | Apr 20, 2022 | Apr 4, 2022 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade criuUpgrade skopeoUpgrade slirp4netnsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade netavarkUpgrade podmanUpgrade libslirp-debugsourceUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade crun-debugsourceUpgrade runcUpgrade buildahUpgrade conmon-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade critUpgrade python3-criuUpgrade buildah-testsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade podman-remoteUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade containers-commonUpgrade fuse-overlayfsUpgrade podman-plugins-debuginfoUpgrade podman-debuginfo | Mar 5, 2024 | Apr 4, 2022 |
| Suse | — | Upgrade podman-remoteUpgrade podman-cni-configUpgrade podmanUpgrade podman-docker | Jan 30, 2023 | Apr 4, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub