The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade udicaUpgrade podmanUpgrade critUpgrade fuse-overlayfsUpgrade buildahUpgrade netavarkUpgrade criuUpgrade skopeoUpgrade runcUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-testsUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade containers-commonUpgrade python3-criuUpgrade container-selinuxUpgrade libslirpUpgrade criu-libsUpgrade libslirp-develUpgrade buildah-testsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade crunUpgrade python3-podmanUpgrade podman-gvproxyUpgrade podman-dockerUpgrade aardvark-dnsUpgrade conmon | Nov 17, 2022 | Sep 13, 2022 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 13, 2022 |
| Centos_linux | — | Upgrade containers-commonUpgrade podman-testsUpgrade crunUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-remoteUpgrade critUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade criu-libsUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade skopeo-testsUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade udicaUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade criu-develUpgrade podman-catatonitUpgrade toolboxUpgrade skopeoUpgrade podman-dockerUpgrade libslirpUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade podman-gvproxyUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade criu-libs-debuginfoUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade netavarkUpgrade conmonUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade conmon-debugsourceUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade toolbox-tests | Nov 9, 2022 | Sep 13, 2022 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 13, 2022 |
| Gentoo Linux | — | Upgrade app-containers/podman. | Jul 9, 2024 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade podmanUpgrade criu-develUpgrade skopeo-testsUpgrade container-selinuxUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade libslirp-develUpgrade containers-commonUpgrade criu-libsUpgrade netavarkUpgrade criuUpgrade python3-criuUpgrade podman-gvproxyUpgrade critUpgrade libslirpUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade runcUpgrade conmonUpgrade crunUpgrade buildahUpgrade podman-catatonitUpgrade slirp4netnsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-testsUpgrade udicaUpgrade podman-dockerUpgrade python3-podman | Nov 22, 2022 | Aug 22, 2022 |
| Redhat Openshift | — | Upgrade openshift-kuryrUpgrade kernel-rtUpgrade openshift-ansibleUpgrade buildahUpgrade openshift4-aws-isoUpgrade runcUpgrade openshiftUpgrade containernetworking-pluginsUpgrade skopeoUpgrade conmonUpgrade openshift-clientsUpgrade kernelUpgrade podman | Aug 10, 2026 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade toolboxUpgrade python3-criuUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade container-selinuxUpgrade podman-debuginfoUpgrade podmanUpgrade criu-libsUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade podman-dockerUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade conmon-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade libslirpUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade conmonUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade criuUpgrade udicaUpgrade netavarkUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade runcNo solution existsUpgrade critUpgrade buildahUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade cockpit-podmanUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfo | Nov 9, 2022 | Sep 13, 2022 |
| Rocky_linux | — | Upgrade podman-gvproxyUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade critUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade libslirpUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade buildahUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade runcUpgrade libslirp-develUpgrade runc-debuginfoUpgrade podman-catatonitUpgrade crunUpgrade skopeo-testsUpgrade crun-debugsourceUpgrade skopeoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade toolboxUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debugsourceUpgrade criu-libsUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade containers-common | Mar 12, 2024 | Sep 13, 2022 |
| Suse | — | Upgrade podman-dockerUpgrade podman-cni-configUpgrade podman-remoteUpgrade podman | Nov 1, 2022 | Sep 13, 2022 |
| Ubuntu | — | Upgrade podman-dockerUpgrade podman | Aug 17, 2023 | Sep 13, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub