A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade libslirp-develUpgrade podman-pluginsUpgrade podman-remoteUpgrade skopeo-testsUpgrade critUpgrade python3-criuUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade buildah-testsUpgrade criuUpgrade podmanUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-testsUpgrade skopeoUpgrade toolbox-testsUpgrade libslirpUpgrade buildahUpgrade toolbox | May 4, 2022 | Apr 1, 2021 |
| Centos_linux | — | Upgrade skopeo-testsUpgrade conmon-debuginfoUpgrade python3-criuUpgrade critUpgrade runcUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade udicaUpgrade libslirp-develUpgrade container-selinuxUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade containers-commonUpgrade podman-remoteUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade criu-develUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade crunUpgrade podman-catatonitUpgrade criuUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debugsourceUpgrade podmanUpgrade toolbox-testsUpgrade buildah | Nov 10, 2021 | Apr 1, 2021 |
| Debian | — | Upgrade golang-github-containers-storage | Jul 30, 2024 | Apr 1, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade cockpit-podmanUpgrade libslirpUpgrade containernetworking-pluginsUpgrade criuUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade podman-dockerUpgrade buildahUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade python3-podmanUpgrade podmanUpgrade skopeoUpgrade podman-remoteUpgrade criu-libsUpgrade containers-commonUpgrade runcUpgrade critUpgrade crunUpgrade udicaUpgrade conmonUpgrade criu-develUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-develUpgrade podman-plugins | Nov 22, 2022 | Apr 1, 2021 |
| Redhat Openshift | — | Upgrade python-eventletUpgrade python-oslo-i18nUpgrade openshift-kuryrUpgrade openshiftUpgrade butaneUpgrade ignitionUpgrade python-keystoneauth1Upgrade python-oslo-dbUpgrade ironic-images-ipa-x86_64Upgrade python-oslo-utilsUpgrade ironic-images-ipa-ppc64leUpgrade python-oslo-concurrencyUpgrade python-oslo-configUpgrade ironic-imagesUpgrade python-toozUpgrade python-pyrsistentUpgrade toolboxUpgrade python-ironic-prometheus-exporterUpgrade podmanUpgrade jenkinsUpgrade openshift-ansibleUpgrade atomic-openshift-service-idlerUpgrade python-oslo-policyUpgrade python-hardwareUpgrade ovn2.13Upgrade openshift-clientsUpgrade jenkins-2-pluginsUpgrade kata-containersUpgrade haproxyUpgrade openvswitch2.15Upgrade python-sushy-oem-idracUpgrade python-oslo-logUpgrade python-jsonschemaUpgrade python-oslo-upgradecheckUpgrade python-debtcollectorUpgrade rust-afterburnUpgrade ostreeUpgrade console-login-helper-messagesUpgrade python-sushyUpgrade openstack-ironic-python-agentUpgrade python-oslo-serializationUpgrade openstack-ironicUpgrade python-ironic-libUpgrade openstack-ironic-inspectorUpgrade coreos-installerUpgrade rteval-loadsUpgrade python-oslo-contextUpgrade python-oslo-serviceUpgrade runcUpgrade cri-oUpgrade python-openshiftUpgrade cri-toolsUpgrade python-kubernetesUpgrade redhat-release-coreosUpgrade python-stevedoreUpgrade python-openstacksdk | Apr 21, 2021 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade python3-podmanUpgrade podman-testsUpgrade criu-libsUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade conmonUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade containers-commonUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-testsUpgrade libslirpUpgrade criu-develUpgrade skopeo-testsUpgrade toolboxUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade skopeoUpgrade crunUpgrade udicaUpgrade toolbox-testsUpgrade podman-catatonitUpgrade runcUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade podmanUpgrade containernetworking-pluginsUpgrade buildahUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade skopeo-debugsourceUpgrade container-selinuxUpgrade critUpgrade libslirp-debuginfoNo solution existsUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-debugsourceUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfo | Nov 10, 2021 | Apr 1, 2021 |
| Rocky_linux | — | Upgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade libslirpUpgrade toolboxUpgrade conmonUpgrade skopeo-debuginfoUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade criu-libsUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade podman-gvproxyUpgrade buildahUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade podman-plugins-debuginfoUpgrade runcUpgrade toolbox-testsUpgrade podman-pluginsUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade toolbox-debuginfoUpgrade skopeoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade crit | Mar 12, 2024 | Apr 1, 2021 |
| Suse | — | Upgrade libseccomp2Upgrade conmonUpgrade podman-cni-configUpgrade podmanUpgrade libseccomp-toolsUpgrade libseccomp-develUpgrade libseccomp2-32bitUpgrade libcontainers-common | Mar 5, 2022 | Apr 1, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 1, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub