A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade podman | Jul 23, 2026 | Jul 23, 2026 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podmanUpgrade runcUpgrade containernetworking-pluginsUpgrade ose-rhel-coreosUpgrade kernelUpgrade openshift-kuryrUpgrade openshiftUpgrade openshift-clientsUpgrade buildahUpgrade ignitionUpgrade openshift4-aws-isoUpgrade cri-oUpgrade kernel-rtUpgrade openshift-ansibleUpgrade conmonUpgrade haproxyUpgrade cri-tools | Aug 10, 2026 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade toolboxUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade libslirp-develUpgrade skopeoUpgrade runcUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade criuUpgrade criu-libsUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade netavarkUpgrade podman-debugsourceUpgrade criu-develUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade podman-gvproxyUpgrade buildahUpgrade conmon-debugsourceUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade runc-debugsourceUpgrade crunUpgrade conmon | Feb 5, 2026 | Nov 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Sep 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub