The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade crunUpgrade podman-catatonitUpgrade critUpgrade containernetworking-pluginsUpgrade criuUpgrade cockpit-podmanUpgrade udicaUpgrade netavarkUpgrade podman-gvproxyUpgrade podman-testsUpgrade skopeoUpgrade podmanUpgrade podman-remoteUpgrade slirp4netnsUpgrade runcUpgrade podman-dockerUpgrade buildah-testsUpgrade toolboxUpgrade conmonUpgrade aardvark-dnsUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade criu-libsUpgrade libslirp-develUpgrade containers-commonUpgrade libslirpUpgrade container-selinuxUpgrade criu-develUpgrade podman-pluginsUpgrade skopeo-tests | Oct 30, 2024 | Oct 9, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 8, 2025 | Oct 9, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade netavarkUpgrade buildahUpgrade podmanUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-catatonitUpgrade criuUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podman-remoteUpgrade runcUpgrade container-selinuxUpgrade criu-develUpgrade podman-testsUpgrade libslirpUpgrade critUpgrade python3-criuUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade libslirp-develUpgrade crunUpgrade containers-commonUpgrade skopeo-testsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade conmon | Nov 11, 2024 | Oct 9, 2024 |
| Redhat Openshift | — | Upgrade podman | Nov 7, 2024 | Oct 9, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 31, 2024 | Oct 9, 2024 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade crunUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade libslirpUpgrade podman-debugsourceUpgrade podman-testsUpgrade criu-libsUpgrade conmonUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade buildah-testsUpgrade podman-pluginsUpgrade crun-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-debugsourceUpgrade critUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade crun-debugsourceUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsource | Nov 19, 2024 | Oct 9, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade podmanUpgrade podman-dockerUpgrade govulncheck-vulndbUpgrade podmanshUpgrade buildah | Dec 31, 2024 | Oct 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub