Skip to content
OpenAdvisories
High RHSA-2021:0681 1 CVE

Red Hat Security Advisory: podman security update

Published Sep 13, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 podman 0:1.6.4-29.el7_9
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 podman-debuginfo 0:1.6.4-29.el7_9
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 podman-docker 0:1.6.4-29.el7_9

Vulnerabilities 1

  • High 7.0
    CVE-2021-20188

    Improper Authorization in github.com/containers/libpod

    A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if …

    libpod libpod github.com/containers/libpod Debian Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1915734
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1930552
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0681.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-20188
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-20188
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-20188