The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-systemd-hookUpgrade oci-umount | May 13, 2022 | Oct 28, 2019 |
| Centos_linux | — | Upgrade podman-manpagesUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfsUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-umount-debuginfoUpgrade python-podman-apiUpgrade podman-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade oci-systemd-hookUpgrade podman-remoteUpgrade podmanUpgrade runcUpgrade oci-umountUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade podman-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade oci-umount-debugsourceUpgrade runc-debugsource | Jan 20, 2020 | Oct 28, 2019 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade oci-umountUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade skopeoUpgrade toolboxUpgrade oci-umount-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade containers-commonUpgrade podmanUpgrade podman-remote-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade python-podman-apiUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade runcUpgrade container-selinuxUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade oci-systemd-hookUpgrade podman-remoteUpgrade oci-umount-debugsourceUpgrade containernetworking-pluginsUpgrade oci-systemd-hook-debuginfoUpgrade podman-manpagesUpgrade podman-debuginfo | Jan 20, 2020 | Oct 28, 2019 |
| Rocky_linux | — | Upgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade oci-systemd-hook-debuginfoUpgrade oci-umountUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debugsource | Mar 12, 2024 | Oct 28, 2019 |
| Suse | — | Upgrade podman-cni-configUpgrade cniUpgrade cni-pluginsUpgrade conmonUpgrade podmanUpgrade fuse-overlayfs | Mar 31, 2020 | Oct 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub