Skip to content
OpenAdvisories
Medium RHSA-2020:0680 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.3.5 podman security update

Published Sep 16, 2024 · Updated Jan 28, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.3::el8 podman 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-debuginfo 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-debugsource 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-docker 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-manpages 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-remote 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-remote-debuginfo 0:1.6.4-7.el8
Red Hat · OpenShift 4 openshift:4.3::el8 podman-tests 0:1.6.4-7.el8

Vulnerabilities 1

  • Medium 5.9
    CVE-2020-1726

    Podman has Files or Directories Accessible to External Parties

    A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attache…

    The podman podman github.com/containers/podman Debian Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1801152
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0680.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1726
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1726
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1726