A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the first time, it is possible to trigger the flaw and overwrite files in the volume.This issue was introduced in version 1.6.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade python-podman-apiUpgrade python3-criuUpgrade slirp4netnsUpgrade toolboxUpgrade criuUpgrade udica | May 13, 2022 | Feb 11, 2020 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Feb 11, 2020 |
| Centos_linux | — | Upgrade podman-debuginfoUpgrade podmanUpgrade skopeoUpgrade python3-criuUpgrade containers-commonUpgrade critUpgrade slirp4netns-debugsourceUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade podman-remoteUpgrade python-podman-apiUpgrade podman-debugsourceUpgrade criuUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade udicaUpgrade conmonUpgrade fuse-overlayfsUpgrade buildah | Apr 29, 2020 | Feb 11, 2020 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Feb 11, 2020 |
| Oracle_linux | — | Upgrade podmanUpgrade podman-testsUpgrade criuUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade skopeoUpgrade conmonUpgrade slirp4netnsUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remoteUpgrade buildah-testsUpgrade python-podman-apiUpgrade python3-criuUpgrade runcUpgrade cockpit-podmanUpgrade buildahUpgrade udicaUpgrade container-selinuxUpgrade crit | Jul 22, 2024 | Feb 11, 2020 |
| Redhat Openshift | — | Upgrade podman | Mar 12, 2020 | Feb 11, 2020 |
| Redhat_linux | — | Upgrade toolboxUpgrade podmanUpgrade critUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade container-selinuxUpgrade podman-remoteUpgrade runcUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade containers-commonUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade criuUpgrade python-podman-apiUpgrade slirp4netnsUpgrade udicaUpgrade runc-debugsourceUpgrade python3-criuUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade podman-tests | Apr 29, 2020 | Feb 11, 2020 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade runcUpgrade runc-debuginfoUpgrade python3-criuUpgrade critUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade criuUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade criu-debugsource | Mar 12, 2024 | Feb 11, 2020 |
| Suse | — | Upgrade conmonUpgrade libcontainers-commonUpgrade podman-remoteUpgrade podmanUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade podman-cni-config | Sep 29, 2020 | Feb 11, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub