The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade conmonUpgrade slirp4netnsUpgrade criuUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade podman-dockerUpgrade libslirpUpgrade buildahUpgrade container-selinuxUpgrade crunUpgrade netavarkUpgrade udicaUpgrade python3-podmanUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade podman-testsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade skopeoUpgrade critUpgrade podman-pluginsUpgrade podmanUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade runcUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade criu-develUpgrade containers-commonUpgrade aardvark-dnsUpgrade skopeo-tests | Oct 16, 2024 | Oct 1, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Oct 10, 2024 | Oct 1, 2024 |
| Debian | — | Upgrade golang-github-containers-common | May 15, 2025 | Oct 1, 2024 |
| Oracle_linux | — | Upgrade podman-testsUpgrade podman-remoteUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade podman-dockerUpgrade libslirpUpgrade criuUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade critUpgrade runcUpgrade python3-podmanUpgrade libslirp-develUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade crunUpgrade skopeoUpgrade containers-commonUpgrade podman-pluginsUpgrade criu-develUpgrade python3-criuUpgrade criu-libsUpgrade container-selinuxUpgrade buildahUpgrade cockpit-podmanUpgrade netavarkUpgrade podmanUpgrade slirp4netns | Oct 16, 2024 | Oct 1, 2024 |
| Redhat Openshift | — | Upgrade ose-rhel-coreosUpgrade cri-oUpgrade rhcos | Oct 17, 2024 | Oct 1, 2024 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runcUpgrade toolboxUpgrade criu-libsUpgrade podman-debugsourceUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade python3-podmanUpgrade critUpgrade libslirp-develUpgrade conmonUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podmanUpgrade skopeoUpgrade toolbox-debugsourceUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade netavarkUpgrade podman-pluginsUpgrade skopeo-testsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade udicaUpgrade fuse-overlayfsUpgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade python3-criuUpgrade libslirpUpgrade criu-debugsourceUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade buildahUpgrade container-selinuxUpgrade criuUpgrade podman-testsUpgrade podman-dockerUpgrade buildah-testsUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade toolbox-debuginfo | Oct 16, 2024 | Oct 1, 2024 |
| Rocky_linux | — | Upgrade buildah-debuginfoUpgrade libslirpUpgrade skopeoUpgrade conmon-debugsourceUpgrade netavarkUpgrade buildah-testsUpgrade containers-commonUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade toolboxUpgrade criu-libsUpgrade toolbox-testsUpgrade buildahUpgrade podmanUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade criu-develUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade critUpgrade podman-testsUpgrade runc-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade runc | Nov 4, 2024 | Oct 1, 2024 |
| Suse | — | Upgrade buildahUpgrade podmanUpgrade podman-dockerUpgrade podman-remoteUpgrade podmanshUpgrade govulncheck-vulndb | Dec 31, 2024 | Oct 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub