The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade critUpgrade slirp4netnsUpgrade criu-develUpgrade crunUpgrade podman-catatonitUpgrade libslirpUpgrade container-selinuxUpgrade podman-testsUpgrade conmonUpgrade cockpit-podmanUpgrade udicaUpgrade toolbox-testsUpgrade criuUpgrade podman-pluginsUpgrade python3-podmanUpgrade toolboxUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-dockerUpgrade runcUpgrade podman-gvproxyUpgrade libslirp-develUpgrade aardvark-dnsUpgrade podmanUpgrade skopeoUpgrade containernetworking-pluginsUpgrade buildahUpgrade criu-libsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade netavarkUpgrade containers-commonUpgrade fuse-overlayfs | May 23, 2023 | Mar 27, 2023 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Mar 27, 2023 |
| Centos_linux | — | Upgrade podman-catatonitUpgrade buildahUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade udicaUpgrade buildah-testsUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade critUpgrade runcUpgrade libslirp-debugsourceUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade podman-testsUpgrade conmonUpgrade crunUpgrade podman-dockerUpgrade criuUpgrade skopeoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade toolbox-testsUpgrade python3-criuUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debuginfoUpgrade libslirpUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade criu-libsUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade toolboxUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade criu-develUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfo | May 17, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Mar 27, 2023 |
| Gentoo Linux | — | Upgrade app-containers/podman. | Jul 9, 2024 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade podman-testsUpgrade slirp4netnsUpgrade criu-develUpgrade podmanUpgrade podman-dockerUpgrade crunUpgrade container-selinuxUpgrade python3-podmanUpgrade podman-gvproxyUpgrade udicaUpgrade libslirp-develUpgrade libslirpUpgrade podman-pluginsUpgrade runcUpgrade critUpgrade conmonUpgrade skopeoUpgrade buildah-testsUpgrade buildahUpgrade netavarkUpgrade containers-commonUpgrade podman-remoteUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade criu-libs | Jul 22, 2024 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade podman | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade cockpit-podmanUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade criu-libsUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade runc-debuginfoUpgrade buildah-testsUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade conmonUpgrade runc-debugsourceUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxyUpgrade python3-podmanUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-dockerUpgrade criu-debuginfoUpgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-debugsourceUpgrade toolboxUpgrade udicaUpgrade crunUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade skopeoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoNo solution existsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade crun-debugsourceUpgrade netavarkUpgrade critUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade libslirp-debuginfo | May 17, 2023 | Mar 27, 2023 |
| Rocky_linux | — | Upgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade libslirp-develUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade python3-criuUpgrade criu | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade podman-cni-configUpgrade podman-dockerUpgrade podman-remoteUpgrade podman | Apr 12, 2023 | Mar 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub