A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade criu-libsUpgrade skopeo-testsUpgrade python3-criuUpgrade container-selinuxUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade libslirp-develUpgrade criu-develUpgrade podman-testsUpgrade cockpit-podmanUpgrade crunUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade libslirpUpgrade buildah-testsUpgrade criuUpgrade podmanUpgrade python3-podmanUpgrade conmonUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podman-pluginsUpgrade toolbox-testsUpgrade skopeoUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade toolboxUpgrade buildahUpgrade runcUpgrade podman-remoteUpgrade netavarkUpgrade udica | May 13, 2022 | May 10, 2022 |
| Alpine Linux | — | Upgrade podman | Oct 1, 2024 | Apr 29, 2022 |
| Centos_linux | — | Upgrade conmon-debuginfoUpgrade containers-commonUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade conmonUpgrade libslirpUpgrade podman-dockerUpgrade cockpit-podmanUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade crun-debuginfoUpgrade python3-podmanUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade criu-libsUpgrade crunUpgrade podman-debugsourceUpgrade libslirp-develUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade buildahUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade netavarkUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade critUpgrade aardvark-dnsUpgrade criuUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade udicaUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade fuse-overlayfsUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade toolbox-testsUpgrade toolbox | May 13, 2022 | Apr 29, 2022 |
| Debian | — | Upgrade libpodUpgrade golang-github-containers-psgo | Jul 30, 2024 | Apr 29, 2022 |
| Oracle_linux | — | Upgrade netavarkUpgrade aardvark-dnsUpgrade podmanUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade buildahUpgrade conmonUpgrade libslirpUpgrade buildah-testsUpgrade criu-libsUpgrade slirp4netnsUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade criuUpgrade containers-commonUpgrade podman-gvproxyUpgrade runcUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade podman-dockerUpgrade python3-criuUpgrade podman-remoteUpgrade crunUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade criu-develUpgrade critUpgrade podman-testsUpgrade udicaUpgrade container-selinux | May 18, 2022 | Jul 15, 2021 |
| Redhat Openshift | — | Upgrade podman | May 30, 2022 | Jul 15, 2021 |
| Redhat_linux | — | Upgrade skopeo-testsNo solution existsUpgrade criu-develUpgrade podmanUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade crun-debugsourceUpgrade netavarkUpgrade skopeoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade containers-commonUpgrade podman-catatonitUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade python3-podmanUpgrade crunUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade runc-debugsourceUpgrade udicaUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade runcUpgrade buildahUpgrade python3-criuUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade python-podman-apiUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade criu-debuginfoUpgrade podman-testsUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade critUpgrade podman-debuginfoUpgrade podman-dockerUpgrade crun-debuginfoUpgrade conmon-debuginfo | May 13, 2022 | Apr 29, 2022 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade skopeoUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade criu-libsUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade criu-develUpgrade podman-gvproxy-debuginfoUpgrade conmon-debugsourceUpgrade libslirpUpgrade crun-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade critUpgrade python3-criuUpgrade criu-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade fuse-overlayfsUpgrade conmonUpgrade crunUpgrade slirp4netnsUpgrade criuUpgrade skopeo-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debuginfoUpgrade runc-debugsourceUpgrade netavarkUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade conmon-debuginfoUpgrade toolbox-tests | Mar 5, 2024 | Apr 29, 2022 |
| Suse | — | Upgrade podmanUpgrade podman-remoteUpgrade podman-cni-configUpgrade podman-docker | Oct 26, 2022 | Apr 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub