The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade podman-pluginsUpgrade criu-develUpgrade runcUpgrade containers-commonUpgrade criu-libsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade libslirp-develUpgrade skopeoUpgrade podmanUpgrade python3-podmanUpgrade udicaUpgrade podman-testsUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade conmonUpgrade netavarkUpgrade buildah-testsUpgrade podman-dockerUpgrade container-selinuxUpgrade crunUpgrade fuse-overlayfsUpgrade criuUpgrade podman-catatonitUpgrade slirp4netnsUpgrade buildahUpgrade libslirpUpgrade toolboxUpgrade podman-gvproxy | Oct 16, 2024 | Oct 1, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Oct 10, 2024 | Oct 1, 2024 |
| Debian | — | Upgrade golang-github-containers-common | May 15, 2025 | Oct 1, 2024 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-testsUpgrade python3-podmanUpgrade slirp4netnsUpgrade skopeoUpgrade podman-pluginsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade python3-criuUpgrade crunUpgrade criu-libsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade container-selinuxUpgrade conmonUpgrade cockpit-podmanUpgrade podmanUpgrade critUpgrade netavarkUpgrade podman-catatonitUpgrade criuUpgrade libslirpUpgrade podman-remoteUpgrade runcUpgrade podman-gvproxyUpgrade buildahUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade buildah-tests | Oct 16, 2024 | Oct 1, 2024 |
| Redhat Openshift | — | Upgrade ose-rhel-coreosUpgrade rhcosUpgrade cri-o | Oct 17, 2024 | Oct 1, 2024 |
| Redhat_linux | — | Upgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade criuUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade libslirpUpgrade buildah-debuginfoUpgrade podman-testsUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade buildahUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade python3-criuUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade criu-develUpgrade runc-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade skopeoUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade podman-debugsourceUpgrade podman-catatonitUpgrade podman-remoteUpgrade netavarkUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade critUpgrade criu-libsUpgrade crunUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade podmanUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfo | Oct 16, 2024 | Oct 1, 2024 |
| Rocky_linux | — | Upgrade podman-remoteUpgrade crun-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade criu-develUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podman-gvproxyUpgrade podman-testsUpgrade runcUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade python3-criuUpgrade buildah-testsUpgrade toolbox-testsUpgrade criu-debuginfoUpgrade containers-commonUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade conmonUpgrade podman-catatonitUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade netavarkUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade criuUpgrade buildah-debuginfoUpgrade skopeoUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade buildah | Nov 4, 2024 | Oct 1, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade podmanshUpgrade govulncheck-vulndbUpgrade podman-dockerUpgrade buildahUpgrade podman | Dec 31, 2024 | Oct 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub