The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade criu-develUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade skopeo-testsUpgrade python3-podmanUpgrade netavarkUpgrade slirp4netnsUpgrade libslirp-develUpgrade podman-gvproxyUpgrade podman-testsUpgrade container-selinuxUpgrade containers-commonUpgrade libslirpUpgrade criu-libsUpgrade toolboxUpgrade buildah-testsUpgrade podman-catatonitUpgrade skopeoUpgrade buildahUpgrade python3-criuUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade criuUpgrade crunUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade critUpgrade udicaUpgrade podmanUpgrade runc | Apr 30, 2024 | Mar 18, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Aug 22, 2024 | Mar 18, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Mar 18, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 18, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade criu-develUpgrade criu-libsUpgrade container-selinuxUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade podmanUpgrade libslirp-develUpgrade crunUpgrade podman-pluginsUpgrade podman-dockerUpgrade netavarkUpgrade buildah-testsUpgrade libslirpUpgrade udicaUpgrade fuse-overlayfsUpgrade criuUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade python3-podmanUpgrade podman-testsUpgrade conmonUpgrade python3-criuUpgrade runcUpgrade slirp4netnsUpgrade buildahUpgrade crit | Apr 25, 2024 | Mar 18, 2024 |
| Redhat Openshift | — | Upgrade podman | May 9, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade buildah-testsUpgrade toolbox-testsUpgrade skopeoUpgrade udicaUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade podman-catatonitNo solution existsUpgrade criu-debuginfoUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade podmanUpgrade buildahUpgrade netavarkUpgrade podman-testsUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade toolboxUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade critUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade criu-develUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade runc-debugsourceUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade containers-commonUpgrade podman-gvproxyUpgrade criu-libsUpgrade crunUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade podman-pluginsUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade python3-podmanUpgrade slirp4netns-debugsource | Apr 29, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade containers-commonUpgrade crun-debuginfoUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmonUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade criuUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade buildahUpgrade slirp4netnsUpgrade toolbox-debugsourceUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade netavarkUpgrade podman-catatonitUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-remoteUpgrade toolbox-testsUpgrade skopeoUpgrade toolboxUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade runcUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade runc-debuginfo | May 8, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade docker-rootless-extrasUpgrade podman-dockerUpgrade dockerUpgrade buildahUpgrade podmanUpgrade podmanshUpgrade docker-bash-completionUpgrade docker-zsh-completionUpgrade podman-cni-configUpgrade docker-fish-completionUpgrade cniUpgrade cni-plugins | Apr 1, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Mar 18, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub