[CVE-2026-17106 ] Published: Jul 30, 2026, 10:00:00 PM UTC
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extract
High(7.8) Affected Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.1.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Affected · Fixed: 6.1.2-1.1
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.1.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 6.1.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
[CVE-2026-57231 ] Published: Jun 24, 2026, 10:00:00 PM UTC
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that va
High(7.5) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.0.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 6.0.2-1.1
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.0.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 6.0.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
[CVE-2026-33414 ] Published: Apr 14, 2026, 10:00:00 PM UTC
Podman is a tool for managing OCI containers and pods. Versions 4.8.0 through 5.8.1 contain a command injection vulnerability in the HyperV machine backend in pkg/machine/hyperv/stubber.go, where the
High(8.8) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.8.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.8.2-1.1
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.8.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.8.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
[CVE-2025-52881 ] Published: Nov 5, 2025, 12:00:00 AM UTC
runC vulnerabilities
High(8.2) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.7.1-1.1
Version impact unknown
usn · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.7.1-1.1
usn · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.7.1-1.1
Version impact unknown
usn · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.7.1-1.1
Version impact unknown
usn · podman · opensuse · tumbleweed
[CVE-2025-6032 ] Published: Jun 24, 2025, 12:00:00 AM UTC
A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.
High(8.3) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.5.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.5.2-1.1
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.5.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.5.2-1.1
Version impact unknown
nvd · podman · opensuse · tumbleweed
[CVE-2025-22869 ] Published: Feb 26, 2025, 12:00:00 AM UTC
Go Cryptography vulnerabilities
High(7.5) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.4.1-3.1
Version impact unknown
usn · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.4.1-3.1
usn · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.4.1-3.1
Version impact unknown
usn · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.4.1-3.1
Version impact unknown
usn · podman · opensuse · tumbleweed
[CVE-2025-27144 ] Published: Feb 24, 2025, 10:22:22 PM UTC
Security update for buildah
High(7.5) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.4.0-3.1
Version impact unknown
pypi · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.4.0-3.1
pypi · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.4.0-3.1
Version impact unknown
pypi · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.4.0-3.1
Version impact unknown
pypi · podman · opensuse · tumbleweed
[CVE-2024-9676 ] Published: Oct 15, 2024, 3:00:00 PM UTC
golang-github-containers-storage: CVE-2024-9676
Medium(6.5) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.2.4-3.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.2.4-3.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.2.4-3.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.2.4-3.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2024-9675 ] Published: Oct 9, 2024, 12:00:00 AM UTC
golang-github-containers-buildah: CVE-2024-9675
High(7.8) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.2.4-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.2.4-2.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.2.4-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.2.4-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2024-9341 ] Published: Oct 1, 2024, 3:45:00 PM UTC
golang-github-containers-common: CVE-2024-9341
Medium(5.4) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.2.4-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.2.4-1.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.2.4-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.2.4-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2024-6104 ] Published: Jun 24, 2024, 12:00:00 AM UTC
golang-github-hashicorp-go-retryablehttp: CVE-2024-6104
Medium(6) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.1.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 5.1.1-2.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 5.1.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 5.1.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2023-0778 ] Published: Mar 27, 2023, 9:15:00 PM UTC
libpod: CVE-2023-0778
Medium(6.8) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.4.2-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 4.4.2-1.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.4.2-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 4.4.2-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2022-2989 ] Published: Aug 22, 2022, 12:00:00 AM UTC
libpod: CVE-2022-2989
Medium(4.4) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.3.1-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 4.3.1-1.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.3.1-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 4.3.1-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2022-27649 ] Published: Apr 4, 2022, 8:15:00 PM UTC
libpod: CVE-2022-27649
Medium(5) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.0.3-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 4.0.3-1.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.0.3-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 4.0.3-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2022-1227 ] Published: Jan 1, 2022, 12:00:00 AM UTC
golang-github-containers-psgo: CVE-2022-1227
High(8) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.2.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 4.2.1-2.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.2.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2021-4024 ] Published: Nov 24, 2021, 12:00:00 AM UTC
libpod: CVE-2021-4024
Medium(4.8) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 3.4.4-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 3.4.4-1.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 3.4.4-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 3.4.4-1.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2021-20206 ] Published: Feb 5, 2021, 12:00:00 AM UTC
golang-github-appc-cni: CVE-2021-20206
High(7.2) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.2.0-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 4.2.0-2.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 4.2.0-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 4.2.0-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
[CVE-2018-10856 ] Published: May 31, 2018, 12:00:00 AM UTC
libpod: CVE-2018-10856
Medium(5.3) Unknown Details (4) 6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 3.3.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 3.3.1-2.1
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · x86_64 · tumbleweed
Unknown · Fixed: 3.3.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
6.0.2-1.1 · noarch · tumbleweed
Unknown · Fixed: 3.3.1-2.1
Version impact unknown
dsa · podman · opensuse · tumbleweed
