A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade toolboxUpgrade crunUpgrade skopeoUpgrade containers-commonUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade criu-develUpgrade podman-remoteUpgrade podman-pluginsUpgrade criu-libsUpgrade podmanUpgrade container-selinuxUpgrade criuUpgrade netavarkUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade runcUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade critUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade libslirpUpgrade conmonUpgrade buildah-testsUpgrade buildahUpgrade udicaUpgrade podman-dockerUpgrade podman-testsUpgrade python-podman-apiUpgrade python3-criu | May 4, 2022 | Apr 4, 2022 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Apr 4, 2022 |
| Centos_linux | — | Upgrade criu-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade libslirp-debuginfoUpgrade udicaUpgrade aardvark-dnsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade runcUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade podman-debuginfoUpgrade podman-remoteUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade criu-develUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade criu-debuginfoUpgrade criuUpgrade podman-remote-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade skopeoUpgrade toolboxUpgrade slirp4netnsUpgrade podman-testsUpgrade criu-libsUpgrade buildah-debugsourceUpgrade buildahUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade containers-common | Apr 27, 2022 | Apr 4, 2022 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Apr 4, 2022 |
| Oracle_linux | — | Upgrade containernetworking-pluginsUpgrade buildah-testsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade podman-remoteUpgrade buildahUpgrade skopeoUpgrade podmanUpgrade python3-criuUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade netavarkUpgrade criu-libsUpgrade podman-dockerUpgrade skopeo-testsUpgrade container-selinuxUpgrade criu-develUpgrade slirp4netnsUpgrade python-podman-apiUpgrade criuUpgrade podman-testsUpgrade critUpgrade libslirpUpgrade runcUpgrade udicaUpgrade python3-podmanUpgrade conmonUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade crunUpgrade podman-catatonit | Apr 29, 2022 | Mar 30, 2022 |
| Redhat_linux | — | Upgrade runc-debuginfoUpgrade skopeo-testsUpgrade buildah-testsUpgrade runcUpgrade runc-debugsourceUpgrade python-podman-apiUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade buildahUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade critUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade udicaUpgrade criu-develUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade netavarkUpgrade podmanUpgrade crunUpgrade criuUpgrade buildah-debugsourceUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade podman-pluginsUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade criu-libsUpgrade podman-dockerUpgrade toolboxUpgrade libslirpUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade skopeo | Apr 20, 2022 | Apr 4, 2022 |
| Rocky_linux | — | Upgrade criu-libsUpgrade skopeo-debugsourceUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade containers-commonUpgrade conmon-debugsourceUpgrade toolbox-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildahUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade runcUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade criu-develUpgrade libslirpUpgrade conmonUpgrade skopeo-debuginfoUpgrade criuUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade podmanUpgrade libslirp-debugsourceUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade toolbox-testsUpgrade fuse-overlayfs-debuginfo | Mar 5, 2024 | Apr 4, 2022 |
| Suse | — | Upgrade podman-cni-configUpgrade podman-remoteUpgrade podman-dockerUpgrade podman | Jan 30, 2023 | Apr 4, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub