The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirpUpgrade containers-commonUpgrade python3-podmanUpgrade criu-develUpgrade criu-libsUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-pluginsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-remoteUpgrade critUpgrade udicaUpgrade conmonUpgrade cockpit-podmanUpgrade crunUpgrade toolboxUpgrade runcUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade netavarkUpgrade buildah-testsUpgrade podman-dockerUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade podmanUpgrade criuUpgrade podman-catatonit | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade containers-commonUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade criu-libsUpgrade critUpgrade criu-develUpgrade libslirpUpgrade skopeo-testsUpgrade podman-testsUpgrade conmonUpgrade skopeoUpgrade runcUpgrade crunUpgrade python3-criuUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podmanUpgrade criuUpgrade slirp4netnsUpgrade podman-remoteUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-dockerUpgrade cockpit-podman | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade conmon-debuginfoUpgrade buildahUpgrade podman-testsUpgrade python3-criuUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade criu-debuginfoUpgrade crunUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade libslirpUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade critUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debugsourceUpgrade toolboxUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade criuUpgrade containers-common | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade podmanUpgrade podman-dockerUpgrade podmanshUpgrade buildahUpgrade govulncheck-vulndb | Dec 31, 2024 | Oct 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub