The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade skopeo-testsUpgrade containers-commonUpgrade criu-libsUpgrade podman-pluginsUpgrade criu-develUpgrade libslirpUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade python3-criuUpgrade cockpit-podmanUpgrade netavarkUpgrade aardvark-dnsUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade runcUpgrade udicaUpgrade skopeoUpgrade buildahUpgrade podman-catatonitUpgrade toolbox-testsUpgrade podman-dockerUpgrade criuUpgrade toolboxUpgrade critUpgrade podman-remoteUpgrade conmonUpgrade podman-gvproxyUpgrade podman-testsUpgrade buildah-testsUpgrade podman | Feb 10, 2025 | Jan 22, 2025 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Aug 8, 2025 | Jan 22, 2025 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Jan 22, 2025 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade podmanUpgrade podman-remoteUpgrade criuUpgrade libslirp-develUpgrade skopeoUpgrade criu-develUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade critUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade runcUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade python3-criuUpgrade buildahUpgrade container-selinuxUpgrade cockpit-podmanUpgrade udicaUpgrade crunUpgrade slirp4netnsUpgrade libslirpUpgrade conmonUpgrade podman-dockerUpgrade aardvark-dnsUpgrade podman-testsUpgrade python3-podman | Feb 4, 2025 | Jan 20, 2025 |
| Redhat Openshift | — | Upgrade buildahUpgrade ose-rhel-coreosUpgrade podman | Feb 10, 2025 | Jan 20, 2025 |
| Redhat_linux | — | Upgrade podmanUpgrade buildahUpgrade podman-gvproxyUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade podman-dockerUpgrade podman-debuginfoUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-debugsource | Feb 5, 2025 | Jan 22, 2025 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade containers-commonUpgrade libslirp-develUpgrade aardvark-dnsUpgrade conmonUpgrade buildahUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade criu-libsUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade criu-debugsourceUpgrade libslirpUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade crunUpgrade criu-develUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade podman-gvproxyUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade criuUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade podman-remoteUpgrade critUpgrade containernetworking-plugins-debugsource | Feb 14, 2025 | Jan 22, 2025 |
| Suse | — | Upgrade podmanUpgrade podman-remoteUpgrade podmanshUpgrade buildahUpgrade podman-dockerUpgrade govulncheck-vulndb | Dec 5, 2025 | Feb 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub