{"id":"CVE-2026-57231","aliases":["ALPINE-CVE-2026-57231","ALSA-2026:37123","ALSA-2026:38504","AZL-91448","BELL-CVE-2026-57231","CLSA-2026-1784074201","DEBIAN-CVE-2026-57231","EUVD-2026-39807","GHSA-4hq8-gpf5-8p68","GO-2026-6594","RHSA-2026:29954","RHSA-2026:37072","RHSA-2026:37123","RHSA-2026:38504","RLSA-2026:37072","RLSA-2026:37123","RLSA-2026:38504","SUSE-SU-2026:23205-1","SUSE-SU-2026:24233-1","SUSE-SU-2026:24378-1","SUSE-SU-2026:3536-1","SUSE-SU-2026:3652-1","SUSE-SU-2026:3662-1","UBUNTU-CVE-2026-57231","openSUSE-SU-2026:11437-1","openSUSE-SU-2026:22089-1"],"status":"published","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00437,"percentile":0.38276,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-668"],"published":"2026-06-26T16:29:02Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Go","package":"github.com/containers/podman/v5","fixed_in":["5.8.4"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"go.podman.io/podman/v6","fixed_in":["6.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"github.com/containers/podman","fixed_in":["5.8.4"],"sources":["ghsa"]},{"ecosystem":"Alpine:v3.24","package":"podman","fixed_in":["5.8.6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"podman","fixed_in":["5.8.4-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman","fixed_in":["2:4.4.1-13.el9_2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-docker","fixed_in":["2:4.4.1-13.el9_2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-gvproxy","fixed_in":["2:4.4.1-13.el9_2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-plugins","fixed_in":["2:4.4.1-13.el9_2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-remote","fixed_in":["2:4.4.1-13.el9_2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-tests","fixed_in":["2:4.4.1-13.el9_2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"podman","fixed_in":["5.8.4+ds1-1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"podman","fixed_in":["6.0.2-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/podman/v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.4"}]}]},{"source":"ghsa","ecosystem":"Go","package":"go.podman.io/podman/v6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/podman/v4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.9.5"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/podman/v3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.4.7"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/podman/v2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.2.1"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containers/podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.1"},{"fixed":"5.8.4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.1"},{"fixed":"5.8.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module_el8.10.0+4089+ce72bbbe"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module_el8.10.0+4047+545787c4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module_el8.10.0+3901+4b80ecd7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module_el8.10.0+4213+0493256b"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module_el8.10.0+4213+0493256b"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"84.1-1.module_el8.10.0+4102+6c76e544"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module_el8.10.0+3970+8445edf6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module_el8.10.0+4090+91932338"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module_el8.10.0+4068+0e21408f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-3.module_el8.10.0+4213+0493256b"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-8.module_el8.10.0+4136+16425343"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module_el8.10.0+3876+e55593a8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module_el8.10.0+3901+4b80ecd7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module_el8.10.0+4089+ce72bbbe"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4047+545787c4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3901+4b80ecd7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3845+87b84552"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4089+ce72bbbe"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3909+6e1c1eb7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4016+efd18bf8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4089+ce72bbbe"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4068+0e21408f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3858+6ad51f9f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3970+8445edf6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3909+6e1c1eb7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3926+f12484f5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4082+f7f0c95e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.10.0+4102+6c76e544"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3-2.module_el8.10.0+4082+f7f0c95e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-1.module_el8.10.0+4047+545787c4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-1.module_el8.10.0+4082+f7f0c95e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-1.module_el8.10.0+3792+03eaed9c"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-1.module_el8.10.0+4068+0e21408f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4023+db236c53"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4090+91932338"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4089+ce72bbbe"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4102+6c76e544"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4068+0e21408f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+3970+8445edf6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-2.module_el8.10.0+4082+f7f0c95e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module_el8.10.0+4023+db236c53"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module_el8.10.0+3970+8445edf6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module_el8.10.0+4082+f7f0c95e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.module_el8.10.0+4047+545787c4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.module_el8.10.0+3909+6e1c1eb7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.module_el8.10.0+4068+0e21408f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module_el8.10.0+4227+f1240cfc"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3970+8445edf6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3901+4b80ecd7"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-5.module_el8.10.0+3876+e55593a8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-3.module_el8.10.0+4016+efd18bf8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.2.9-4.module_el8.10.0+4136+16425343"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.6-2.module_el8.10.0+4211+49ea0979"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.6-2.module_el8.10.0+4211+49ea0979"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+4047+545787c4"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+4023+db236c53"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+3926+f12484f5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-1.module_el8.10.0+4082+f7f0c95e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-21.module_el8.10.0+4068+0e21408f"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.6.1-10"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.5.1-r1"},{"fixed":"5.8.4-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-13.el9_2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-13.el9_2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-13.el9_2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-13.el9_2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-13.el9_2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-13.el9_2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+ds1-2","5.6.1+ds1-1","5.6.1+ds1-2","5.6.1+ds2-2","5.6.1+ds2-3","5.6.2+ds1-1","5.6.2+ds1-2","5.6.2+ds1-3","5.6.2+ds1-3+exp1","5.6.2+ds1-4","5.7.0+ds2-1","5.7.0+ds2-2","5.7.0+ds2-3","5.8.0+ds1-1","5.8.1+ds1-1","5.8.1+ds1-2","5.8.1+ds1-3","5.8.2+ds1-1","5.8.2+ds1-2","5.8.2+ds1-3","5.8.3+ds1-1","5.8.4+ds1-1","5.8.4+ds1-2","5.8.6+ds1-1","5.8.6+ds1-2","5.8.6+ds1-3","6.1.1+ds1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.4+ds1-1"}]}],"versions":["5.4.2+ds1-2","5.6.1+ds1-1","5.6.1+ds1-2","5.6.1+ds2-2","5.6.1+ds2-3","5.6.2+ds1-1","5.6.2+ds1-2","5.6.2+ds1-3","5.6.2+ds1-3+exp1","5.6.2+ds1-4","5.7.0+ds2-1","5.7.0+ds2-2","5.7.0+ds2-3","5.8.0+ds1-1","5.8.1+ds1-1","5.8.1+ds1-2","5.8.1+ds1-3","5.8.2+ds1-1","5.8.2+ds1-2","5.8.2+ds1-3","5.8.3+ds1-1"]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.8.4"}]}]},{"source":"osv","ecosystem":"Go","package":"go.podman.io/podman/v6","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"4.9.5"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"3.4.7"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.2.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"introduced":"1.8.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/libpod","ranges":[{"type":"SEMVER","events":[{"introduced":"1.8.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.8.4"}]}]},{"source":"osv","ecosystem":"Go","package":"go.podman.io/podman/v6","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"podman-machine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"podmansh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.14-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-3.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-8.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-8.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-8.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.4-34.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.2.9-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.2.9-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.2.9-4.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.6-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.6-2.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5.1-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5.1-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5.1-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5.1-1.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+24510+6ea3880e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:10","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.8.2-4.el10_2"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:5.8.2-4.el9_8"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.1-2.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-8.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-82.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-3.module+el8.10.0+40223+e940a224"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-5.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-3.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.2.9-4.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.6-2.module+el8.10.0+40223+e940a224"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5.1-1.module+el8.10.0+40133+32c21f88.rocky.0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+40047+0c0a73f4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+40133+32c21f88"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+2001+6a33db9f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1872+2e18eb19"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1874+ce489889"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1880+8e896d1b"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1896+b18fa106"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-21.module+el8.10.0+1843+6892ab28"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-slfo.1.1_6.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150500.3.78.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.79.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.79.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.79.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.79.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.79.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150400.4.79.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5-150300.9.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.1+ds1-1","5.4.2+ds1-1","5.4.2+ds1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.0+ds2-3build1","5.8.3+ds1-1","5.8.4+ds1-1","5.8.6+ds1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+ds1-2","5.7.0+ds2-3","5.7.0+ds2-3build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-160000.6.1"}]}],"bundled":2}],"products":[{"vendor":"containers","product":"podman"},{"vendor":"podman-container-tools","product":"podman"},{"vendor":"podman_project","product":"podman"}],"references":[{"url":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68","tags":["x_refsource_CONFIRM","Patch","Third Party Advisory","advisory","web","article","report"]},{"url":"https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050","tags":["x_refsource_MISC","Patch","fix","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57231","tags":["web","advisory"]},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v5.8.4","tags":["web"]},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v6.0.0","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4hq8-gpf5-8p68"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-57231","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:37123","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25681","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27136","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39829","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39832","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39835","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42508","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57231","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480680","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480681","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480685","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480688","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480757","tags":["report"]},{"url":"https://bugzilla.redhat.com/2480761","tags":["report"]},{"url":"https://bugzilla.redhat.com/2493620","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-37123.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:38504","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33811","tags":["report"]},{"url":"https://bugzilla.redhat.com/2467822","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-38504.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-57231","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784074201.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57231.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-57231","tags":["advisory"]},{"url":"https://github.com/podman-container-tools/podman","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29954","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55686","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29954.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2493624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55686","tags":["advisory"]},{"url":"https://github.com/podman-container-tools/podman/commit/d18e44e9abb3bf5b7294aa70806e1368fdddfdd0","tags":["article"]},{"url":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2493620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57231","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:37072","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480761","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37072.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25681","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25681","tags":["advisory"]},{"url":"https://go.dev/cl/781703","tags":["article"]},{"url":"https://go.dev/issue/79574","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5029","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27136","tags":["advisory"]},{"url":"https://go.dev/cl/781685","tags":["article"]},{"url":"https://go.dev/issue/79575","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5030","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39829","tags":["advisory"]},{"url":"https://go.dev/cl/781641","tags":["article"]},{"url":"https://go.dev/cl/781661","tags":["article"]},{"url":"https://go.dev/issue/79565","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/a082jnz-LvI","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5018","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39830","tags":["advisory"]},{"url":"https://go.dev/cl/781640","tags":["article"]},{"url":"https://go.dev/cl/781664","tags":["article"]},{"url":"https://go.dev/issue/79564","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5017","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39832","tags":["advisory"]},{"url":"https://go.dev/cl/778642","tags":["article"]},{"url":"https://go.dev/issue/79435","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5006","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39835","tags":["advisory"]},{"url":"https://go.dev/cl/781660","tags":["article"]},{"url":"https://go.dev/issue/79563","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5015","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42508","tags":["advisory"]},{"url":"https://go.dev/cl/781220","tags":["article"]},{"url":"https://go.dev/issue/79568","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-5021","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37123.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467822","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38504.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33811","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33811","tags":["advisory"]},{"url":"https://go.dev/cl/767860","tags":["article"]},{"url":"https://go.dev/issue/78803","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/qcCIEXso47M","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4981","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:37072","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:37123","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:38504","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623205-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268579","tags":["report"]},{"url":"https://bugzilla.suse.com/1269471","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57231","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624233-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248988","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624378-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42508","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263536-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263652-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263662-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-57231","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-57231","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T16:29:02.092Z","modified":"2026-06-27T02:41:58.574Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-200","CWE-668"],"updated_at":"2026-11-02T13:43:44.898272Z"}],"euvd":[{"id":"EUVD-2026-39807","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T16:29:02Z","modified":"2026-06-27T02:41:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:23.728044Z"}],"ghsa":[{"id":"GHSA-4hq8-gpf5-8p68","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","description":"## Summary\n\nAn container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched.\n\n## Details\n\npodman run allows `--env VAR1` or `--env VAR*` which will read the variable values from the current environment and then passes them into the container. However because the same parsing logic was reused for the image config env section that means that an image variable could also gain access to that.\n\n## Patch\n\nThat image spec requires the env variables to be in the form of `key=value`, so to address this invalid formatted variables get rejected and the container will not run.\n\nFixed in https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050\n\n## Workaround\n\nDo not run untrusted images. Before running an image consider inspecting the config with `podman image inspect --format '{{.Config.Env}}' \u003cimage\u003e` and check for any variables that do not have a value assigned.","status":"published","published":"2026-09-24T19:40:20Z","modified":"2026-09-24T19:40:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:41:21.616682Z"}],"nvd":[{"id":"CVE-2026-57231","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T17:16:34.697Z","modified":"2026-10-25T17:10:00.197Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-200","CWE-668"],"updated_at":"2026-11-02T14:12:26.045561Z"}],"osv":[{"id":"ALPINE-CVE-2026-57231","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T17:16:34.697Z","modified":"2026-11-03T06:32:58.078810751Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2026-57231","status":"published","published":"2026-07-01T06:03:07.558868Z","modified":"2026-07-05T07:15:04.379498012Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:24.657778Z"},{"id":"CVE-2026-57231","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T16:29:02.092Z","modified":"2026-10-28T02:30:24.31953773Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200","CWE-668"],"updated_at":"2026-11-02T15:45:12.016252Z"},{"id":"DEBIAN-CVE-2026-57231","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T17:16:34.697Z","modified":"2026-10-26T12:02:58.298037688Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"GHSA-4hq8-gpf5-8p68","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","description":"## Summary\n\nAn container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched.\n\n## Details\n\npodman run allows `--env VAR1` or `--env VAR*` which will read the variable values from the current environment and then passes them into the container. However because the same parsing logic was reused for the image config env section that means that an image variable could also gain access to that.\n\n## Patch\n\nThat image spec requires the env variables to be in the form of `key=value`, so to address this invalid formatted variables get rejected and the container will not run.\n\nFixed in https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050\n\n## Workaround\n\nDo not run untrusted images. Before running an image consider inspecting the config with `podman image inspect --format '{{.Config.Env}}' \u003cimage\u003e` and check for any variables that do not have a value assigned.","status":"published","published":"2026-09-24T19:40:20Z","modified":"2026-10-01T20:55:51.913378865Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:37.148947Z"},{"id":"RHSA-2026:29954","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-01T10:18:42Z","modified":"2026-10-10T10:07:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:37072","title":"Red Hat Security Advisory: podman security, bug fix, and enhancement update","status":"published","published":"2026-07-09T10:13:05Z","modified":"2026-10-20T10:08:02Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:37123","title":"Red Hat Security Advisory: podman security, bug fix, and enhancement update","status":"published","published":"2026-07-09T10:13:06Z","modified":"2026-10-20T10:08:04Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:38504","title":"Red Hat Security Advisory: container-tools:rhel8 security update","status":"published","published":"2026-07-13T10:07:43Z","modified":"2026-10-20T10:08:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:37072","title":"Important: podman security, bug fix, and enhancement update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n\n* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n\n* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n\n* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n\n* golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n\n* golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n\n* golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n\n* podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)\n\nBug Fix(es) and Enhancement(s):\n\n* podman does not clean up all files and leaves orphaned files consuming disk space [rhel-10.2.z] (JIRA:Rocky Linux-173842)\n\n* [FJ10.2 Bug]: [REG]The \"podman-remote save\" command fails for rootless users. [rhel-10.2.z] (JIRA:Rocky Linux-192440)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-10T12:05:34.876921Z","modified":"2026-07-10T12:30:04.707671859Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:37123","title":"Important: podman security, bug fix, and enhancement update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n\n* golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n\n* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n\n* golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n\n* golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n\n* golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n\n* podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)\n\nBug Fix(es) and Enhancement(s):\n\n* podman does not clean up all files and leaves orphaned files consuming disk space [rhel-9.8.z] (JIRA:Rocky Linux-173988)\n\n* [FJ9.8 Bug]: [REG]The \"podman-remote save\" command fails for rootless users. [rhel-9.8.z] (JIRA:Rocky Linux-192439)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-10T12:03:38.827258Z","modified":"2026-07-10T12:30:04.753824606Z","cvss":[{"version":"3.1","score":8.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:38504","title":"Important: container-tools:rhel8 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n\n* podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-13T12:01:07.269263Z","modified":"2026-07-13T12:30:04.960660013Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-57231","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T17:16:00Z","modified":"2026-10-17T12:59:12.099402527Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"ALSA-2026:37123","title":"Important: podman security, bug fix, and enhancement update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  \n\nSecurity Fix(es):  \n\n  * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n  * golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n  * golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n  * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n  * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n  * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * podman does not clean up all files and leaves orphaned files consuming disk space [almalinux-9.8.z] (JIRA:AlmaLinux-173988)\n  * [FJ9.8 Bug]: [REG]The \"podman-remote save\" command fails for rootless users. [almalinux-9.8.z] (JIRA:AlmaLinux-192439)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-10-29T11:32:35.686877186Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:38504","title":"Important: container-tools:rhel8 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.  \n\nSecurity Fix(es):  \n\n  * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n  * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n  * podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-13T00:00:00Z","modified":"2026-10-29T11:02:24.783726897Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-91448","title":"CVE-2026-57231 affecting package podman 5.6.1-10","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","status":"published","published":"2026-06-26T17:16:34Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"CLSA-2026-1784074201","title":"podman: Fix of CVE-2026-57231","description":"- CVE-2026-57231: reject image environment variables that are not strict\n  key=value in ParseImageEnvs(), preventing a crafted image from leaking\n  matching host environment variables into the container","status":"published","published":"2026-07-15T00:10:14Z","modified":"2026-10-26T09:30:26.610089431Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"GO-2026-6594","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod","description":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod","status":"published","published":"2026-10-01T20:23:38Z","modified":"2026-10-01T20:45:15.887460994Z","updated_at":"2026-11-02T15:47:03.11707Z"},{"id":"openSUSE-SU-2026:11437-1","title":"podman-6.0.2-1.1 on GA media","description":"These are all security issues fixed in the podman-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-02T00:00:00Z","modified":"2026-08-03T10:30:30.275667662Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:22089-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n\nNon security issue fixed:\n\n- catatonit missing in /usr/libexec/podman/ (bsc#1248988).\n","status":"published","published":"2026-10-12T08:44:51Z","modified":"2026-10-19T17:23:13.535336489Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23205-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n","status":"published","published":"2026-08-17T19:56:54Z","modified":"2026-08-26T18:23:31.680064462Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:24233-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n\nNon security issue fixed:\n\n- catatonit missing in /usr/libexec/podman/ (bsc#1248988).\n","status":"published","published":"2026-10-12T08:48:41Z","modified":"2026-10-21T17:23:11.444313238Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24378-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n","status":"published","published":"2026-10-20T15:18:07Z","modified":"2026-10-27T17:23:19.473573797Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:3536-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and\n  ownership modification on the host filesystem (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n","status":"published","published":"2026-08-07T20:09:48Z","modified":"2026-08-10T18:23:53.06914093Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3652-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and\n  ownership modification on the host filesystem (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n","status":"published","published":"2026-08-19T19:10:42Z","modified":"2026-08-21T09:15:32.571159786Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3662-1","title":"Security update for podman","description":"This update for podman fixes the following issues:\n\n- CVE-2026-55686: specially crafted image where the `WORKDIR` path contains a symlink allows for directory creation and\n  ownership modification on the host filesystem (bsc#1268579).\n- CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the\n  container (bsc#1269471).\n","status":"published","published":"2026-08-20T18:19:29Z","modified":"2026-08-21T09:15:32.50323185Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}