Red Hat Security Advisory: podman security, bug fix, and enhancement update

Fixed packages 3

Vulnerabilities 2

• Medium 5.5
  CVE-2019-18466

  Podman Symlink Vulnerability

  An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing parti…

  github.com/containers/podman/v3 github.com/containers/podman/v4 github.com/containers/podman github.com/containers/podman/v2 Go
  Oct 28, 2019
• Unscored —
  CVE-2020-1702

  A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, su…

  May 27, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1650395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1744588
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1758509
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1788549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1792796
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1797599
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1806895
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807437
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1807586
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1808702
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1227.json
• report
  https://access.redhat.com/security/cve/CVE-2019-18466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-18466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-18466
• report
  https://access.redhat.com/security/cve/CVE-2020-1702
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-1702
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-1702