Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-catatonit | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-catatonit-debuginfo | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-debuginfo | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-debugsource | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-docker | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-gvproxy | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-gvproxy-debuginfo | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-plugins | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-plugins-debuginfo | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-remote | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-remote-debuginfo | 2:4.2.0-7.el9_1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | podman-tests | 2:4.2.0-7.el9_1 |
Vulnerabilities 2
-
High 7.1
Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to…
-
High 7.1
Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used t…
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2120436
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2121445
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2121453
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2123319
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2123905
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124676
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2124716
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136278
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136281
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2136287
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8431.json
-
report
https://access.redhat.com/security/cve/CVE-2022-2989
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-2989
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2989
-
article
https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/
-
report
https://access.redhat.com/security/cve/CVE-2022-2990
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-2990
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2990