Description
An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | buildah +1 | 1.9.0-5.module+el8.1.0+4240+893c1ab8 | RHSA-2019:4269 |
| RHEL 8 | cockpit-podman | 4-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | container-selinux | 2:2.123.0-2.module+el8.1.0+4900+9d7326b8 | RHSA-2019:4269 |
| RHEL 8 | containernetworking-plugins | 0.8.1-3.module+el8.1.0+4881+045289ee | RHSA-2019:4269 |
| RHEL 8 | fuse-overlayfs | 0.4.1-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | podman +4 | 1.4.2-6.module+el8.1.0+4830+f49150d7 | RHSA-2019:4269 |
| RHEL 8 | python-podman-api | 1.2.0-0.1.gitd0a45fe.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | runc | 1.0.0-61.rc8.module+el8.1.0+4873+4a24e241 | RHSA-2019:4269 |
| RHEL 8 | skopeo +2 | 1:0.1.37-6.module+el8.1.0+4876+e678a192 | RHSA-2019:4269 |
| RHEL 8 | slirp4netns | 0.3.0-4.module+el8.1.0+4306+1d917805 | RHSA-2019:4269 |
| RHEL 8 | toolbox | 0.0.4-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | podman +1 | 1.6.4-16.el7_8 | RHSA-2020:1227 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43 | ALSA-2019:4269 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43 | ALSA-2019:4269 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f | RLSA-2019:4269 |
| Rocky Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f | RLSA-2019:4269 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | cni | 0.7.1-3.3.1 | SUSE-SU-2020:0697-1 |
| SLES 15 SP1 | cni-plugins | 0.8.4-3.3.1 | SUSE-SU-2020:0697-1 |
| SLES 15 SP1 | conmon | 2.0.10-3.3.1 | SUSE-SU-2020:0697-1 |
| SLES 15 SP1 | fuse-overlayfs | 0.7.6-3.6.1 | SUSE-SU-2020:0697-1 |
| SLES 15 SP1 | podman | 1.8.0-4.14.1 | SUSE-SU-2020:0697-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.1 | cni | 0.7.1-lp151.2.3.1 | openSUSE-SU-2020:0398-1 |
| openSUSE Leap 15.1 | cni-plugins | 0.8.4-lp151.2.3.1 | openSUSE-SU-2020:0398-1 |
| openSUSE Leap 15.1 | conmon | 2.0.10-lp151.2.1 | openSUSE-SU-2020:0398-1 |
| openSUSE Leap 15.1 | fuse-overlayfs | 0.7.6-lp151.5.1 | openSUSE-SU-2020:0398-1 |
| openSUSE Leap 15.1 | podman | 1.8.0-lp151.3.9.1 | openSUSE-SU-2020:0398-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/containers/libpod | < 1.6.0 | 1.6.0 | GO-2023-1942 |
| Go | github.com/containers/podman | all versions | — | GO-2023-1942 |
| Go | github.com/containers/podman/v2 | all versions | — | GO-2023-1942 |
| Go | github.com/containers/podman/v3 | all versions | — | GO-2023-1942 |
| Go | github.com/containers/podman/v4 | < 1.6.0 | 1.6.0 | GHSA-r34v-gqmw-qvgj |
| Go | github.com/containers/podman/v4 | all versions | — | GO-2023-1942 |
Advisories 6
- ALSA-2019:4269 Important: container-tools:rhel8 security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2019:4269 Red Hat Security Advisory: container-tools:rhel8 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:1227 Red Hat Security Advisory: podman security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RLSA-2019:4269 Important: container-tools:rhel8 security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2020:0697-1 Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0398-1 Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1744588
- https://github.com/containers/libpod/issues/3829
- https://github.com/containers/libpod/commit/5c09c4d2947a759724f9d5aef6bac04317e03f7e
- https://github.com/containers/libpod/compare/v1.5.1...v1.6.0
- RHSA-2019:4269 vendor-advisory
- openSUSE-SU-2020:0398 vendor-advisory