Description
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | image | < 5.29.3, 5.30.0 – < 5.30.1 | 5.29.3 |
| Red Hat | OADP-1.3-RHEL-9 | — | — |
| Red Hat | Red Hat Advanced Cluster Security 4.4 | — | — |
| Red Hat | Red Hat Advanced Cluster Security 4.5 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Migration Toolkit for Containers 1.8 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | — |
| Red Hat | RHEL-9-CNV-4.15 | — | — |
| Red Hat | Multicluster Engine for Kubernetes | — | — |
| Red Hat | OpenShift Developer Tools and Services | — | — |
| Red Hat | OpenShift Serverless | — | — |
| Red Hat | OpenShift Source-to-Image (S2I) | — | — |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | — | — |
| Red Hat | Red Hat Advanced Cluster Security 3 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 1.2 | — | — |
| Red Hat | Red Hat Ansible Automation Platform 2 | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 3.11 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat OpenShift Container Platform Assisted Installer 1 | — | — |
| Red Hat | Red Hat OpenShift Dev Spaces | — | — |
| Red Hat | Red Hat Openshift Sandboxed Containers | — | — |
| Red Hat | Red Hat OpenShift Virtualization 4 | — | — |
| Red Hat | Red Hat OpenStack Platform 16.2 | — | — |
| Red Hat | Red Hat Quay 3 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-github-containers-image | 5.29.3-1 | — |
| Debian 13 | golang-github-containers-image | 5.29.3-1 | — |
| Debian 12 | golang-github-containers-image | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | golang-github-opencontainers-go-digest | No fix yet | — |
| Ubuntu 26.04 LTS | golang-github-opencontainers-go-digest | No fix yet | — |
| Ubuntu 25.10 | golang-github-opencontainers-go-digest | No fix yet | — |
| Ubuntu 24.04 LTS | golang-github-opencontainers-go-digest | No fix yet | — |
| Ubuntu 22.04 LTS | golang-github-opencontainers-go-digest | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | golang-github-opencontainers-go-digest | No fix yet | — |
| Ubuntu 18.04 LTS | golang-github-opencontainers-go-digest | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 2:1.37.2-1.el9 | RHSA-2024:9097 |
| RHEL 9 | podman +4 | 2:5.2.2-1.el9 | RHSA-2024:9102 |
| RHEL 9 | skopeo +1 | 2:1.16.1-1.el9 | RHSA-2024:9098 |
| RHEL 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | podman +6 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | python-podman +1 | 4.9.0-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | runc | 1:1.1.12-4.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Openshift Ironic 4 | openstack-ironic +5 | 1:21.3.1-0.20240911165036.c0d61d0.el9 | RHSA-2024:7941 |
| Red Hat Openshift Ironic 4 | python-eventlet +1 | 0.33.1-6.el9 | RHSA-2024:0045 |
| Red Hat Openshift Ironic 4 | python-webob +1 | 1.8.8-2.el9 | RHSA-2024:7941, RHSA-2024:7187, RHSA-2024:7182 |
| Red Hat OpenShift 4 | bpftool | 7.3.0-427.24.1.el9_4 | RHSA-2024:4159 |
| Red Hat OpenShift 4 | butane +1 | 0.21.0-1.rhaos4.16.el8 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | cri-o | 1.29.5-5.rhaos4.16.git7032128.el8 | RHSA-2024:4159, RHSA-2024:0045 |
| Red Hat OpenShift 4 | cri-tools | 1.29.0-3.1.el8 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | ignition +1 | 2.18.0-2.1.rhaos4.16.el9 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | openshift +5 | 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8 | RHSA-2024:4159, RHSA-2024:0045 |
| Red Hat OpenShift 4 | openshift-prometheus-promu +1 | 0.15.0-15.2.gitd5383c5.el9 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | ose-aws-ecr-image-credential-provider | 4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | ose-azure-acr-image-credential-provider | 4.16.0-202404301345.p0.g0e95532.assembly.stream.el8 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | ose-gcp-gcr-image-credential-provider | 4.16.0-202404181812.p0.g26b43df.assembly.stream.el8 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | perf +80 | 5.14.0-427.24.1.el9_4 | RHSA-2024:4159 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-13.rhaos4.13.el8 | RHSA-2024:7941, RHSA-2024:7187, RHSA-2024:7182 |
| Red Hat OpenShift 4 | runc | 4:1.1.12-3.1.rhaos4.16.el8 | RHSA-2024:0045 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.3-3.rhaos4.13.el8 | RHSA-2024:7941, RHSA-2024:7187, RHSA-2024:7182 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 2:1.37.2-1.el9 | ALSA-2024:9097 |
| AlmaLinux 9 | skopeo +1 | 2:1.16.1-1.el9 | ALSA-2024:9098 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:5258 |
| AlmaLinux 8 | buildah +1 | 2:1.33.8-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | crit +2 | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:5258 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:5258 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | python3-podman | 4.9.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | runc | 1:1.1.12-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | podman | 4:5.2.2-13.el9_5 | RLSA-2024:9102 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | buildah | 2:1.33.8-4.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | podman | 4:4.9.4-12.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | python-podman | 4.9.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | runc | 1:1.1.12-4.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | skopeo | 2:1.14.5-3.module+el8.10.0+1843+6892ab28 | RLSA-2024:5258 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:5258 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2024:5258 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | apptainer | 1.3.6-150600.4.6.1 | SUSE-SU-2025:0313-1 |
| SLES 15 SP6 | buildah | 1.35.4-150500.3.10.1 | SUSE-SU-2024:3151-1 |
| SLES 15 SP6 | containerized-data-importer | 1.58.0-150600.3.3.2 | SUSE-SU-2024:1989-1 |
| SLES 15 SP6 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES 15 SP6 | govulncheck-vulndb | 0.0.20250207T224745-150000.1.32.1 | SUSE-SU-2025:0429-1 |
| SLES 15 SP6 | podman | 4.9.5-150500.3.12.1 | SUSE-SU-2024:2031-1 |
| SLES 15 SP6 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLES 15 SP6 | warewulf4 | 4.5.2-150500.6.13.1 | SUSE-SU-2024:1838-1 |
| SLES 15 SP5 | buildah | 1.35.4-150500.3.10.1 | SUSE-SU-2024:3151-1 |
| SLES 15 SP5 | containerized-data-importer | 1.58.0-150500.6.15.1 | SUSE-SU-2024:1988-1 |
| SLES 15 SP5 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES 15 SP5 | podman | 4.9.5-150500.3.12.1 | SUSE-SU-2024:2031-1 |
| SLES 15 SP5 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLES 15 SP5 | warewulf4 | 4.5.2-150500.6.13.1 | SUSE-SU-2024:1838-1 |
| SLES 15 SP4 | buildah | 1.35.4-150400.3.30.1 | SUSE-SU-2024:3186-1 |
| SLES 15 SP4 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES 15 SP4 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
| SLES 15 SP4 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLES 15 SP3 | buildah | 1.35.4-150300.8.25.1 | SUSE-SU-2024:3120-1 |
| SLES 15 SP3 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES 15 SP3 | podman | 4.9.5-150300.9.31.1 | SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1 |
| SLES 15 SP3 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLES 15 SP2 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES 15 SP2 | podman | 2.1.1-150100.4.31.1 | SUSE-SU-2024:2548-1 |
| SLES 15 SP2 | skopeo | 0.1.41-150000.4.23.1 | SUSE-SU-2024:2383-1 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | buildah | 1.35.4-150400.3.30.1 | SUSE-SU-2024:3186-1 |
| SLES for SAP 15 SP4 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES for SAP 15 SP4 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
| SLES for SAP 15 SP4 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLES for SAP 15 SP3 | buildah | 1.35.4-150300.8.25.1 | SUSE-SU-2024:3120-1 |
| SLES for SAP 15 SP3 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES for SAP 15 SP3 | podman | 4.9.5-150300.9.31.1 | SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1 |
| SLES for SAP 15 SP3 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLES for SAP 15 SP2 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLES for SAP 15 SP2 | podman | 2.1.1-150100.4.31.1 | SUSE-SU-2024:2548-1 |
| SLES for SAP 15 SP2 | skopeo | 0.1.41-150000.4.23.1 | SUSE-SU-2024:2383-1 |
| SLE Micro 6.1 | podman | 5.2.5-slfo.1.1_1.1 | SUSE-SU-2025:20279-1 |
| SLE Micro 6.0 | containerized-data-importer | 1.60.1-1.1 | SUSE-SU-2025:20055-1 |
| SLE Micro 6.0 | podman | 4.9.5-1.1 | SUSE-SU-2025:20013-1 |
| SLE Micro 6.0 | skopeo | 1.14.4-1.1 | SUSE-SU-2025:20019-1 |
| SLE Micro 5.5 | containerized-data-importer | 1.58.0-150500.6.15.1 | SUSE-SU-2024:1988-1 |
| SLE Micro 5.5 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE Micro 5.5 | podman | 4.9.5-150500.3.12.1 | SUSE-SU-2024:2031-1 |
| SLE Micro 5.5 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-2, SUSE-SU-2024:1987-1 |
| SLE Micro 5.4 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE Micro 5.4 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
| SLE Micro 5.3 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE Micro 5.3 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
| SLE Micro 5.2 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE Micro 5.2 | podman | 4.9.5-150300.9.31.1 | SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1 |
| SLE Micro 5.1 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE Micro 5.1 | podman | 4.9.5-150300.9.31.1 | SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1 |
| SLE HPC 15 SP4 | buildah | 1.35.4-150400.3.30.1 | SUSE-SU-2024:3186-1 |
| SLE HPC 15 SP4 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE HPC 15 SP4 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
| SLE HPC 15 SP4 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLE HPC 15 SP3 | buildah | 1.35.4-150300.8.25.1 | SUSE-SU-2024:3120-1 |
| SLE HPC 15 SP3 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE HPC 15 SP3 | podman | 4.9.5-150300.9.31.1 | SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1 |
| SLE HPC 15 SP3 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SLE HPC 15 SP2 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SLE HPC 15 SP2 | podman | 2.1.1-150100.4.31.1 | SUSE-SU-2024:2548-1 |
| SLE HPC 15 SP2 | skopeo | 0.1.41-150000.4.23.1 | SUSE-SU-2024:2383-1 |
| SUSE Package Hub 15 SP5 | apptainer | 1.3.0-bp155.3.3.2 | openSUSE-SU-2024:0244-1 |
| SUSE Package Hub 15 SP5 | squashfuse | 0.5.0-bp155.2.1 | openSUSE-SU-2024:0244-1 |
| SUSE Manager Server 4.3 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SUSE Manager Proxy 4.3 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| SUSE Enterprise Storage 7.1 | buildah | 1.35.4-150300.8.25.1 | SUSE-SU-2024:3120-1 |
| SUSE Enterprise Storage 7.1 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| SUSE Enterprise Storage 7.1 | podman | 4.9.5-150300.9.31.1 | SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1 |
| SUSE Enterprise Storage 7.1 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apptainer | 1.3.0-2.1 | openSUSE-SU-2024:13951-1 |
| openSUSE Tumbleweed | buildah | 1.35.4-1.1 | openSUSE-SU-2024:13952-1 |
| openSUSE Tumbleweed | containerized-data-importer1.65 +1 | 1.65.0-1.1 | openSUSE-SU-2026:11074-1, openSUSE-SU-2026:11054-1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250130T185858-1.1 | openSUSE-SU-2025:14728-1 |
| openSUSE Tumbleweed | podman | 5.0.3-1.1 | openSUSE-SU-2024:13960-1 |
| openSUSE Tumbleweed | singularity-ce | 4.1.3-1.1 | openSUSE-SU-2024:14059-1 |
| openSUSE Tumbleweed | skopeo | 1.15.1-1.1 | openSUSE-SU-2024:14019-1 |
| openSUSE Leap 15.6 | apptainer | 1.3.6-150600.4.6.1 | SUSE-SU-2025:0313-1 |
| openSUSE Leap 15.6 | buildah | 1.35.4-150500.3.10.1 | SUSE-SU-2024:3151-1 |
| openSUSE Leap 15.6 | containerized-data-importer | 1.58.0-150600.3.3.2 | SUSE-SU-2024:1989-1 |
| openSUSE Leap 15.6 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20250207T224745-150000.1.32.1 | SUSE-SU-2025:0429-1 |
| openSUSE Leap 15.6 | podman | 4.9.5-150500.3.12.1 | SUSE-SU-2024:2031-1 |
| openSUSE Leap 15.6 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| openSUSE Leap 15.6 | warewulf4 | 4.5.2-150500.6.13.1 | SUSE-SU-2024:1838-1 |
| openSUSE Leap 15.5 | apptainer | 1.3.0-bp155.3.3.2 | openSUSE-SU-2024:0244-1 |
| openSUSE Leap 15.5 | buildah | 1.35.4-150500.3.10.1 | SUSE-SU-2024:3151-1 |
| openSUSE Leap 15.5 | containerized-data-importer | 1.58.0-150500.6.15.1 | SUSE-SU-2024:1988-1 |
| openSUSE Leap 15.5 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| openSUSE Leap 15.5 | podman | 4.9.5-150500.3.12.1 | SUSE-SU-2024:2031-1 |
| openSUSE Leap 15.5 | skopeo | 1.14.4-150300.11.11.1 | SUSE-SU-2024:1987-1 |
| openSUSE Leap 15.5 | squashfuse | 0.5.0-bp155.2.1 | openSUSE-SU-2024:0244-1 |
| openSUSE Leap 15.5 | warewulf4 | 4.5.2-150500.6.13.1 | SUSE-SU-2024:1838-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | docker | 25.0.6_ce-150000.207.1 | SUSE-SU-2024:3120-1 |
| openSUSE Leap Micro 5.4 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
| openSUSE Leap Micro 5.3 | podman | 4.9.5-150400.4.27.1 | SUSE-SU-2024:2090-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | buildah | 1.35.4-r0 | — |
| Alpine v3.24 | podman | 5.0.3-r0 | — |
| Alpine v3.24 | skopeo | 1.15.1-r0 | — |
| Alpine v3.23 | buildah | 1.35.4-r0 | — |
| Alpine v3.23 | podman | 5.0.3-r0 | — |
| Alpine v3.23 | skopeo | 1.15.1-r0 | — |
| Alpine v3.22 | buildah | 1.35.4-r0 | — |
| Alpine v3.22 | podman | 5.0.3-r0 | — |
| Alpine v3.22 | skopeo | 1.15.1-r0 | — |
| Alpine v3.21 | buildah | 1.35.4-r0 | — |
| Alpine v3.21 | podman | 5.0.3-r0 | — |
| Alpine v3.21 | skopeo | 1.15.1-r0 | — |
| Alpine v3.20 | buildah | 1.35.4-r0 | — |
| Alpine v3.20 | podman | 5.0.3-r0 | — |
| Alpine v3.20 | skopeo | 1.15.1-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | buildah | 1.41.4-2 | — |
| Azure Linux 3 | containerized-data-importer | 1.57.0-2 | — |
| Azure Linux 3 | cri-o | No fix yet | — |
| Azure Linux 3 | ig | 0.29.0-1 | — |
| Azure Linux 3 | libcontainers-common | 20240213-2 | — |
| Azure Linux 3 | podman | 5.6.1-2 | — |
| Azure Linux 3 | skopeo | 1.14.4-1 | — |
| Azure Linux 2 (CBL-Mariner) | containerized-data-importer | 1.55.0-19 | — |
| Azure Linux 2 (CBL-Mariner) | cri-o | 1.22.3-3 | — |
| Azure Linux 2 (CBL-Mariner) | libcontainers-common | 20210626-7 | — |
| Azure Linux 2 (CBL-Mariner) | podman +1 | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | skopeo | 1.14.2-4 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 2:1.37.2-1.0.1.el9 | ELSA-2024-9097 |
| Oracle Linux 9 | podman +4 | 4:5.2.2-1.0.2.el9 | ELSA-2024-9102 |
| Oracle Linux 9 | skopeo +1 | 2:1.16.1-1.el9 | ELSA-2024-9098 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-12.0.2.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | python3-podman | 4.9.0-2.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | runc | 1:1.1.12-4.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90384+a78ffc57 | ELSA-2024-5258 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | buildah | 1.35.4-r0 | — |
| Wolfi rolling | skopeo | 1.15.1-r0 | — |
| Wolfi rolling | zot | 2.0.4-r2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/containers/image | < 5.30.1 | 5.30.1 | GHSA-6wvf-f2vw-3425 |
| Go | github.com/containers/image/v5 | >= 5.30.0, < 5.30.1 | 5.30.1 | GHSA-6wvf-f2vw-3425 |
| Go | github.com/containers/image/v5 | < 5.29.3 | 5.29.3 | GHSA-6wvf-f2vw-3425 |
| Go | github.com/containers/image/v5 | < 5.29.3 · >= 5.30.0, < 5.30.1 | 5.29.3, 5.30.1 | GO-2024-2842 |
Advisories 48
- ALSA-2024:9097 Moderate: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9098 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5258 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:0045 Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:9102 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9097 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9098 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:5258 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:7941 Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:7187 Red Hat Security Advisory: OpenShift Container Platform 4.14.38 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:7182 Red Hat Security Advisory: OpenShift Container Platform 4.15.35 packages and security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:4159 Red Hat Security Advisory: OpenShift Container Platform 4.16.1 packages and security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- openSUSE-SU-2026:11074-1 containerized-data-importer1.65-api-1.65.0-1.1 on GA media SUSE / openSUSE Security Updates · Jun 24, 2026
- openSUSE-SU-2026:11054-1 containerized-data-importer-1.65-api-1.65.0-1.1 on GA media SUSE / openSUSE Security Updates · Jun 19, 2026
- SUSE-SU-2025:20055-1 Security update for containerized-data-importer SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20013-1 Security update for podman SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20019-1 Security update for skopeo SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20279-1 Security update for podman SUSE / openSUSE Security Updates · Mar 23, 2026
- RLSA-2024:5258 Important: container-tools:rhel8 security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:9102 Moderate: podman security update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2025:0429-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Feb 5, 2026
- SUSE-SU-2024:1988-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1989-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13951-1 apptainer-1.3.0-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14019-1 skopeo-1.15.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13952-1 buildah-1.35.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2383-1 Security update for skopeo SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14059-1 singularity-ce-4.1.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0313-1 Security update for apptainer SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3186-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1987-2 Security update for skopeo SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14728-1 govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2090-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1987-1 Security update for skopeo SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3120-1 Security update for buildah, docker SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2050-2 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2050-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2031-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:0244-1 Security update for apptainer SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1838-1 Security update for warewulf4 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13960-1 podman-5.0.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2548-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-1474 Red Hat OpenShift Container Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 26, 2025
- SUSE-SU-2024:3151-1 Security update for buildah SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2024-9097 Moderate: buildah security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- ELSA-2024-9102 Moderate: podman security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- ELSA-2024-9098 Moderate: skopeo security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- ELSA-2024-5258 Important: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 13, 2024
References
- RHSA-2024:0045 vendor-advisory
- RHSA-2024:3718 vendor-advisory
- RHSA-2024:4159 vendor-advisory
- RHSA-2024:4613 vendor-advisory
- RHSA-2024:4850 vendor-advisory
- RHSA-2024:4960 vendor-advisory
- RHSA-2024:5258 vendor-advisory
- RHSA-2024:5951 vendor-advisory
- RHSA-2024:6054 vendor-advisory
- RHSA-2024:6122 vendor-advisory
- RHSA-2024:6708 vendor-advisory
- RHSA-2024:6818 vendor-advisory
- RHSA-2024:6824 vendor-advisory
- RHSA-2024:7164 vendor-advisory
- RHSA-2024:7174 vendor-advisory
- RHSA-2024:7182 vendor-advisory
- RHSA-2024:7187 vendor-advisory
- RHSA-2024:7922 vendor-advisory
- RHSA-2024:7941 vendor-advisory
- RHSA-2024:8260 vendor-advisory
- RHSA-2024:8425 vendor-advisory
- RHSA-2024:9097 vendor-advisory
- RHSA-2024:9098 vendor-advisory
- RHSA-2024:9102 vendor-advisory
- RHSA-2024:9960 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-3727 vdb-entry
- RHBZ#2274767 issue-tracking