Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | podman | 0:1.4.4-2.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | podman-debuginfo | 0:1.4.4-2.el7 |
| Red Hat · Rhel Extras Other 7 rhel_extras_other:7 | podman-docker | 0:1.4.4-2.el7 |
Vulnerabilities 1
-
High 7.5
Podman Path Traversal Vulnerability leads to arbitrary file read/write
A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1715667
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1717919
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1727873
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1728242
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1907.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10152
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10152
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10152