A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeo-testsUpgrade python3-criuUpgrade critUpgrade podman-remoteUpgrade criu-develUpgrade podman-dockerUpgrade libslirp-develUpgrade podman-pluginsUpgrade skopeoUpgrade criuUpgrade buildah-testsUpgrade buildahUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade toolbox-testsUpgrade libslirpUpgrade slirp4netnsUpgrade toolbox | May 4, 2022 | Apr 1, 2021 |
| Centos_linux | — | Upgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade crunUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade skopeoUpgrade conmonUpgrade toolboxUpgrade fuse-overlayfsUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade cockpit-podmanUpgrade udicaUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade skopeo-testsUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade podman-remoteUpgrade containers-commonUpgrade slirp4netnsUpgrade libslirpUpgrade podman-gvproxyUpgrade python3-criuUpgrade criu-debugsourceUpgrade libslirp-debuginfoUpgrade runcUpgrade podman-debuginfo | Nov 10, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade golang-github-containers-storage | Jul 30, 2024 | Apr 1, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade python3-criuUpgrade conmonUpgrade criu-libsUpgrade podman-pluginsUpgrade criu-develUpgrade podman-remoteUpgrade critUpgrade skopeo-testsUpgrade udicaUpgrade podman-testsUpgrade libslirp-develUpgrade runcUpgrade crunUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade buildahUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podmanUpgrade podman-gvproxyUpgrade podman-dockerUpgrade criuUpgrade skopeoUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade slirp4netnsUpgrade libslirp | Nov 22, 2022 | Apr 1, 2021 |
| Redhat Openshift | — | Upgrade ironic-images-ipa-x86_64Upgrade python-oslo-concurrencyUpgrade openshift-ansibleUpgrade python-ironic-prometheus-exporterUpgrade python-oslo-policyUpgrade python-oslo-dbUpgrade python-oslo-i18nUpgrade ignitionUpgrade atomic-openshift-service-idlerUpgrade python-oslo-configUpgrade python-pyrsistentUpgrade openshift-clientsUpgrade podmanUpgrade python-hardwareUpgrade python-oslo-utilsUpgrade haproxyUpgrade ironic-images-ipa-ppc64leUpgrade ovn2.13Upgrade python-eventletUpgrade python-toozUpgrade butaneUpgrade openshiftUpgrade ironic-imagesUpgrade python-keystoneauth1Upgrade toolboxUpgrade kata-containersUpgrade openshift-kuryrUpgrade jenkins-2-pluginsUpgrade jenkinsUpgrade runcUpgrade python-oslo-contextUpgrade python-sushyUpgrade python-openshiftUpgrade python-kubernetesUpgrade rust-afterburnUpgrade python-debtcollectorUpgrade python-oslo-logUpgrade coreos-installerUpgrade ostreeUpgrade python-sushy-oem-idracUpgrade openvswitch2.15Upgrade cri-oUpgrade openstack-ironic-python-agentUpgrade python-oslo-serviceUpgrade openstack-ironic-inspectorUpgrade redhat-release-coreosUpgrade openstack-ironicUpgrade python-stevedoreUpgrade python-openstacksdkUpgrade console-login-helper-messagesUpgrade python-jsonschemaUpgrade python-ironic-libUpgrade python-oslo-serializationUpgrade rteval-loadsUpgrade python-oslo-upgradecheckUpgrade cri-tools | Apr 21, 2021 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade toolboxUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade podman-dockerUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade python3-podmanUpgrade criu-libsUpgrade skopeo-testsUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade containers-commonUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade podman-testsUpgrade criu-develUpgrade conmon-debugsourceUpgrade udicaUpgrade runcUpgrade skopeoUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoNo solution existsUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade critUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade toolbox-testsUpgrade python3-criuUpgrade crunUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade criu | Nov 10, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade conmon-debuginfoUpgrade podman-testsUpgrade buildah-testsUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade conmonUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade skopeoUpgrade crunUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade criuUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade toolbox-testsUpgrade runcUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade podman-debugsource | Mar 12, 2024 | Apr 1, 2021 |
| Suse | — | Upgrade libseccomp-toolsUpgrade podmanUpgrade podman-cni-configUpgrade conmonUpgrade libseccomp2Upgrade libcontainers-commonUpgrade libseccomp-develUpgrade libseccomp2-32bit | Mar 5, 2022 | Apr 1, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 1, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub