The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade libslirp-develUpgrade criu-libsUpgrade container-selinuxUpgrade python3-criuUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade crunUpgrade buildah-testsUpgrade cockpit-podmanUpgrade conmonUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade podman-testsUpgrade libslirpUpgrade containers-commonUpgrade criu-develUpgrade buildahUpgrade criuUpgrade podman-remoteUpgrade runcUpgrade fuse-overlayfsUpgrade skopeoUpgrade podman-catatonitUpgrade podmanUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade critUpgrade podman-pluginsUpgrade netavarkUpgrade udicaUpgrade toolbox | Nov 17, 2022 | Sep 13, 2022 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Sep 13, 2022 |
| Centos_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade runcUpgrade buildah-debugsourceUpgrade criu-libsUpgrade podman-pluginsUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade critUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade crunUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade container-selinuxUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade conmonUpgrade cockpit-podmanUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade netavarkUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debuginfoUpgrade libslirpUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade criuUpgrade slirp4netnsUpgrade skopeoUpgrade podman-dockerUpgrade python3-podmanUpgrade criu-debugsourceUpgrade buildahUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade toolboxUpgrade podmanUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade aardvark-dns | Nov 9, 2022 | Sep 13, 2022 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Sep 13, 2022 |
| Gentoo Linux | — | Upgrade app-containers/podman. | Jul 9, 2024 | Sep 13, 2022 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade fuse-overlayfsUpgrade buildahUpgrade runcUpgrade podman-testsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade netavarkUpgrade podman-dockerUpgrade python3-podmanUpgrade criuUpgrade conmonUpgrade libslirpUpgrade critUpgrade podman-gvproxyUpgrade crunUpgrade udicaUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade skopeoUpgrade podman-remoteUpgrade podman-pluginsUpgrade container-selinuxUpgrade criu-develUpgrade podmanUpgrade libslirp-devel | Nov 22, 2022 | Aug 22, 2022 |
| Redhat Openshift | — | Upgrade skopeoUpgrade runcUpgrade kernelUpgrade openshift-clientsUpgrade podmanUpgrade conmonUpgrade containernetworking-pluginsUpgrade openshiftUpgrade buildahUpgrade openshift4-aws-isoUpgrade openshift-kuryrUpgrade kernel-rtUpgrade openshift-ansible | Aug 10, 2026 | Aug 22, 2022 |
| Redhat_linux | — | Upgrade crunUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade skopeo-testsUpgrade container-selinuxUpgrade criu-libsUpgrade podman-pluginsUpgrade libslirp-develUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade crun-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade runcUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade criuUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade critUpgrade podman-dockerUpgrade libslirp-debuginfoUpgrade netavarkUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade conmonUpgrade cockpit-podmanUpgrade udicaUpgrade podman-gvproxyNo solution existsUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade buildahUpgrade libslirpUpgrade slirp4netns | Nov 9, 2022 | Sep 13, 2022 |
| Rocky_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade libslirpUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade python3-criuUpgrade buildahUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade critUpgrade skopeo-debuginfoUpgrade toolbox-testsUpgrade libslirp-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade skopeoUpgrade conmonUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade crunUpgrade runcUpgrade crun-debugsourceUpgrade criu-libsUpgrade runc-debuginfoUpgrade podman-remoteUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade criuUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debugsource | Mar 12, 2024 | Sep 13, 2022 |
| Suse | — | Upgrade podman-dockerUpgrade podman-cni-configUpgrade podman-remoteUpgrade podman | Nov 1, 2022 | Sep 13, 2022 |
| Ubuntu | — | Upgrade podman-dockerUpgrade podman | Aug 17, 2023 | Sep 13, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub