Description
A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | containers/storage | containers/storage 1.28.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-github-containers-storage | 1.34.1+ds1-1 | — |
| Debian 13 | golang-github-containers-storage | 1.34.1+ds1-1 | — |
| Debian 12 | golang-github-containers-storage | 1.34.1+ds1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | golang-github-containers-storage | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 1:1.27.0-2.el9 | RHSA-2022:8008 |
| RHEL 9 | podman +5 | 2:4.2.0-3.el9 | RHSA-2022:7954 |
| RHEL 9 | skopeo +1 | 2:1.9.2-1.el9 | RHSA-2022:7955 |
| RHEL 8 | buildah +1 | 1.19.9-1.module+el8.5.0+12236+c988d830 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | cockpit-podman | 29-2.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | conmon | 2:2.0.26-1.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | container-selinux | 2:2.167.0-1.module+el8.5.0+12582+56d94c81 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | containernetworking-plugins | 0.9.1-1.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | crit +2 | 3.15-1.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | criu-libs +1 | 3.15-3.module+el8.5.0+12582+56d94c81 | RHSA-2021:4154 |
| RHEL 8 | crun | 0.18-2.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | fuse-overlayfs | 1.4.0-2.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | libslirp +1 | 4.3.1-1.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.0-3.module+el8.5.0+11073+ba5c6d09 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | podman +5 | 3.0.1-7.module+el8.5.0+12960+5b7d72b5 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | podman-gvproxy | 3.3.1-9.module+el8.5.0+12697+018f24d7 | RHSA-2021:4154 |
| RHEL 8 | python-podman +1 | 3.2.0-2.module+el8.5.0+12582+56d94c81 | RHSA-2021:4154 |
| RHEL 8 | runc | 1.0.0-72.rc92.module+el8.5.0+12236+c988d830 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | skopeo +2 | 1:1.2.4-1.module+el8.5.0+13605+73abf821 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | slirp4netns | 1.1.8-1.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | toolbox +1 | 0.0.99.3-0.4.module+el8.5.0+12682+a4eeb084 | RHSA-2021:4154, RHBA-2022:0348 |
| RHEL 8 | udica | 0.2.4-1.module+el8.5.0+10306+3f72d66d | RHSA-2021:4154, RHBA-2022:0348 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | afterburn +1 | 5.0.0-1.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | atomic-openshift-service-idler | 4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | butane | 0.12.1-1.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | console-login-helper-messages +2 | 0.20.3-1.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | coreos-installer +1 | 0.9.0-6.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | cri-o | 1.20.2-6.rhaos4.7.gitf1d5201.el7 | RHSA-2021:2437, RHSA-2021:1150 |
| Red Hat OpenShift 4 | cri-tools | 1.21.0-2.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | haproxy | 2.2.13-1.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ignition +1 | 2.9.0-6.rhaos4.8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ironic-images +3 | 2021.1-20210614.1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | jenkins | 2.289.1.1624020353-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | jenkins-2-plugins | 4.8.1624022417-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | kata-containers | 2.1.0-4.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift +1 | 4.7.0-202104090228.p0.git.97111.77863f8.el7 | RHSA-2021:2437, RHSA-2021:1150 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openstack-ironic +4 | 1:17.0.4-0.20210713221218.a415e7e.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openstack-ironic-inspector +4 | 10.6.1-0.20210406091336.579f59c.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | openvswitch2.15 +3 | 2.15.0-9.el8fdp | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ostree +3 | 2020.7-5.el8_4 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | ovn2.13 +3 | 20.12.0-25.el8fdp | RHSA-2021:2437 |
| Red Hat OpenShift 4 | podman +3 | 3.0.1-6.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-debtcollector +1 | 2.2.0-0.20210324220630.649189d.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-eventlet +1 | 0.25.2-4.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-hardware +2 | 0.27.0-0.20210406121246.756fedb.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-ironic-lib +1 | 4.6.2-0.20210608101214.ca2e4ba.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-ironic-prometheus-exporter +1 | 2.2.1-0.20210325143713.70e39c8.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-jsonschema +1 | 3.2.0-5.el8ost | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-keystoneauth1 +1 | 4.3.0-0.20210325001456.6a66271.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-kubernetes +2 | 12.0.1-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-openshift +1 | 1:0.12.1-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-openstacksdk +2 | 0.53.0-0.20210325011601.4629245.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-concurrency +3 | 4.4.0-0.20210325004915.7dcf9e9.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-config +1 | 2:8.5.0-0.20210325050501.cfa2564.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-context +1 | 3.2.0-0.20210325043103.0d02866.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-db +3 | 8.5.0-0.20210325041241.503db60.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-i18n +2 | 5.0.1-0.20210324221600.73187bd.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-log +3 | 4.4.0-0.20210409081224.9b29c90.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-policy +2 | 3.7.0-0.20210325051823.d853485.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-serialization +2 | 4.1.0-0.20210325012242.8445e61.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-service +2 | 2.5.0-0.20210325014731.d25e454.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-upgradecheck +1 | 1.3.0-0.20210325003851.9f95a6e.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-oslo-utils +3 | 4.8.0-0.20210325043201.3288539.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-pyrsistent +1 | 0.16.0-3.el8ost | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-stevedore +1 | 3.3.0-0.20210325001012.7d7154f.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-sushy +2 | 3.7.1-0.20210428165244.bc49878.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-sushy-oem-idrac +2 | 2.0.1-0.20210326152858.83b7eb0.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python-tooz +1 | 2.8.0-0.20210324235001.54448e9.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | python3-ironic-python-agent +1 | 7.0.2-0.20210611153100.bfa97cb.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | redhat-release-coreos | 48.84-4.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | rteval-loads | 1.4-12.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | runc | 1.0.0-98.rhaos4.8.gitcd80260.el7 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | stress-ng | 0.12.06-1.el8 | RHSA-2021:2437 |
| Red Hat OpenShift 4 | toolbox | 0.0.8-3.rhaos4.8.el8 | RHSA-2021:2437 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 1:1.27.0-2.el9 | ALSA-2022:8008 |
| AlmaLinux 9 | podman +5 | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux 9 | skopeo +1 | 2:1.9.2-1.el9 | ALSA-2022:7955 |
| AlmaLinux 8 | buildah +1 | 1.19.9-1.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | cockpit-podman | 29-2.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | conmon | 2:2.0.26-1.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | container-selinux | 2:2.167.0-1.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | containernetworking-plugins | 0.9.1-1.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | crit +2 | 3.15-1.module_el8.5.0+2614+87221ce8 | ALSA-2021:4154, ALBA-2022:0348 |
| AlmaLinux 8 | criu-libs +1 | 3.15-3.module_el8.5.0+2613+1b78b731 | ALSA-2021:4154 |
| AlmaLinux 8 | crun | 0.18-2.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | fuse-overlayfs | 1.4.0-2.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | libslirp +1 | 4.3.1-1.module_el8.5.0+2614+87221ce8 | ALSA-2021:4154, ALBA-2022:0348 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.0-3.module_el8.5.0+2614+87221ce8 | ALSA-2021:4154, ALBA-2022:0348 |
| AlmaLinux 8 | podman +5 | 3.0.1-7.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | runc | 1.0.0-72.rc92.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | skopeo +2 | 1:1.2.4-1.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
| AlmaLinux 8 | slirp4netns | 1.1.8-1.module_el8.5.0+2613+1b78b731 | ALSA-2021:4154, ALBA-2022:0348 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.3-0.4.module_el8.5.0+2613+1b78b731 | ALSA-2021:4154, ALBA-2022:0348 |
| AlmaLinux 8 | udica | 0.2.4-1.module_el8.5.0+2614+87221ce8 | ALBA-2022:0348 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | buildah | 1.22.3-2.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | cockpit-podman | 33-1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | conmon | 2:2.0.29-1.module+el8.4.0+643+525e162a | RLSA-2021:4154 |
| Rocky Linux 8 | container-selinux | 2:2.167.0-1.module+el8.4.0+653+ad26b47d | RLSA-2021:4154 |
| Rocky Linux 8 | containernetworking-plugins | 1.0.0-1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | containers-common | 2:1-2.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | criu | 3.15-3.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | crun | 1.0-1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | fuse-overlayfs | 1.7.1-1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | libslirp | 4.4.0-1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.3-3.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | podman | 3.3.1-9.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | python-podman | 3.2.0-2.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | runc | 1.0.2-1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | skopeo | 1:1.4.2-0.1.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | slirp4netns | 1.1.8-1.module+el8.4.0+537+38cf4e42 | RLSA-2021:4154 |
| Rocky Linux 8 | toolbox | 0.0.99.3-0.4.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
| Rocky Linux 8 | udica | 0.2.5-2.module+el8.5.0+710+4c471e88 | RLSA-2021:4154 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | conmon | 2.0.30-150300.8.3.1 | SUSE-SU-2022:23018-1 |
| SLES 15 SP3 | libcontainers-common | 20210626-150300.8.3.1 | SUSE-SU-2022:23018-1 |
| SLES 15 SP3 | libseccomp | 2.5.3-150300.10.5.1 | SUSE-SU-2022:23018-1 |
| SLES 15 SP3 | podman | 3.4.4-150300.9.3.2 | SUSE-SU-2022:23018-1 |
| SLES 15 SP2 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SLES 15 SP1 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP2 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SLES for SAP 15 SP1 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SLE Micro 5.1 | conmon | 2.0.30-150300.8.3.1 | SUSE-SU-2022:23018-1 |
| SLE Micro 5.1 | libcontainers-common | 20210626-150300.8.3.1 | SUSE-SU-2022:23018-1 |
| SLE Micro 5.1 | libseccomp | 2.5.3-150300.10.5.1 | SUSE-SU-2022:23018-1 |
| SLE Micro 5.1 | podman | 3.4.4-150300.9.3.2 | SUSE-SU-2022:23018-1 |
| SLE HPC 15 SP2 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SLE HPC 15 SP1 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SUSE Manager Server 4.1 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SUSE Manager Retail Branch Server 4.1 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SUSE Manager Proxy 4.1 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SUSE Enterprise Storage 7 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
| SUSE Enterprise Storage 6 | libcontainers-common | 20210626-150100.3.15.1 | SUSE-SU-2022:3312-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libcontainers-common | 20210626-7.1 | openSUSE-SU-2024:11757-1 |
| openSUSE Leap 15.3 | conmon | 2.0.30-150300.8.3.1 | openSUSE-SU-2022:23018-1 |
| openSUSE Leap 15.3 | libcontainers-common | 20210626-150300.8.3.1 | openSUSE-SU-2022:23018-1 |
| openSUSE Leap 15.3 | libseccomp | 2.5.3-150300.10.5.1 | openSUSE-SU-2022:23018-1 |
| openSUSE Leap 15.3 | podman | 3.4.4-150300.9.3.2 | openSUSE-SU-2022:23018-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | buildah | 1.41.4-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 1:1.27.0-2.0.1.el9 | ELSA-2022-8008 |
| Oracle Linux 9 | podman +6 | 2:4.2.0-3.0.1.el9 | ELSA-2022-7954 |
| Oracle Linux 9 | skopeo +1 | 2:1.9.2-1.el9 | ELSA-2022-7955 |
| Oracle Linux 8 | buildah +1 | 1.22.3-2.0.1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | cockpit-podman | 33-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | conmon | 2:2.0.29-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | container-selinux | 2:2.167.0-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | containernetworking-plugins | 1.0.0-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | containers-common | 2:1-2.0.2.module+el8.5.0+20424+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | crit +4 | 3.15-3.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | crun | 1.0-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | fuse-overlayfs | 1.7.1-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.3-3.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | podman +6 | 3.3.1-9.0.1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | python3-podman | 3.2.0-2.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | runc | 1.0.2-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | skopeo +1 | 1:1.4.2-0.1.0.1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | slirp4netns | 1.1.8-1.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
| Oracle Linux 8 | udica | 0.2.5-2.module+el8.5.0+20416+d687fed7 | ELSA-2021-4154 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/containers/storage | < 1.28.1 | 1.28.1 | GHSA-7qw8-847f-pggm |
Advisories 21
- ALSA-2022:8008 Moderate: buildah security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:7955 Moderate: skopeo security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2022:7954 Moderate: podman security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALBA-2022:0348 container-tools:3.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2021:4154 Moderate: container-tools:rhel8 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2022:7954 Red Hat Security Advisory: podman security and bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2021:4154 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2022:8008 Red Hat Security Advisory: buildah security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2022:7955 Red Hat Security Advisory: skopeo security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHBA-2022:0348 Red Hat Bug Fix Advisory: container-tools:3.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2021:2437 Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2021:1150 Red Hat Security Advisory: OpenShift Container Platform 4.7.7 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RLSA-2021:4154 Moderate: container-tools:rhel8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:11757-1 libcontainers-common-20210626-7.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3312-1 Security update for libcontainers-common SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:23018-1 Security update for conmon, libcontainers-common, libseccomp, podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:23018-1 Security update for conmon, libcontainers-common, libseccomp, podman SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2022-7955 Moderate: skopeo security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 22, 2022
- ELSA-2022-8008 Moderate: buildah security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 22, 2022
- ELSA-2022-7954 Moderate: podman security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 22, 2022
- ELSA-2021-4154 Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1939485
- FEDORA-2021-ec00da7faa vendor-advisory
- FEDORA-2021-83b3740389 vendor-advisory
- FEDORA-2021-a3703b9dc8 vendor-advisory
- FEDORA-2021-c56a213327 vendor-advisory
- https://unit42.paloaltonetworks.com/cve-2021-20291/