A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade netavarkUpgrade containers-commonUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podmanUpgrade buildahUpgrade fuse-overlayfsUpgrade criu-libsUpgrade skopeoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade podman-gvproxyUpgrade crunUpgrade criuUpgrade python3-criuUpgrade criu-develUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade podman-testsUpgrade container-selinuxUpgrade runcUpgrade libslirpUpgrade toolbox-testsUpgrade python3-podmanUpgrade conmonUpgrade skopeo-testsUpgrade critUpgrade slirp4netnsUpgrade podman-dockerUpgrade udica | May 23, 2023 | Mar 27, 2023 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Mar 27, 2023 |
| Centos_linux | — | Upgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade criu-develUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade containers-commonUpgrade crun-debuginfoUpgrade libslirp-develUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade crunUpgrade cockpit-podmanUpgrade buildahUpgrade critUpgrade netavarkUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade conmonUpgrade podman-remoteUpgrade podman-dockerUpgrade skopeoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade udicaUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade runcUpgrade podman-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade criuUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade libslirpUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfo | May 17, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Mar 27, 2023 |
| Gentoo Linux | — | Upgrade app-containers/podman. | Jul 9, 2024 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade criu-libsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade buildahUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade netavarkUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-catatonitUpgrade criuUpgrade buildah-testsUpgrade libslirp-develUpgrade podman-dockerUpgrade podmanUpgrade slirp4netnsUpgrade container-selinuxUpgrade udicaUpgrade python3-podmanUpgrade podman-testsUpgrade runcUpgrade conmonUpgrade skopeoUpgrade crunUpgrade skopeo-testsUpgrade podman-pluginsUpgrade critUpgrade podman-gvproxyUpgrade libslirpUpgrade criu-devel | Jul 22, 2024 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade podman | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade criu-develUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirpUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade conmonUpgrade podman-testsUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade python3-podmanUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade libslirp-develUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade critNo solution existsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-pluginsUpgrade crunUpgrade buildahUpgrade udicaUpgrade criuUpgrade skopeoUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsource | May 17, 2023 | Mar 27, 2023 |
| Rocky_linux | — | Upgrade libslirp-debuginfoUpgrade python3-criuUpgrade criuUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade libslirp | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade podman-cni-configUpgrade podman-remoteUpgrade podmanUpgrade podman-docker | Apr 12, 2023 | Mar 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub