All errata/sisyphus/ALT-PU-2023-1146-3
ALT-PU-2023-1146-3

Package update podman in branch sisyphus

Version4.3.1-alt1
Task#314261
Published2026-09-23
Max severityHIGH
Severity:

Closed issues (5)

BDU:2025-11967
LOW3.3

Уязвимость инструмента для создания контейнеров Buildah, связанная с ошибками проверки пути к каталогу, позволяющая нарушителю получить доступ к конфиденциальным данным

Published: 2025-09-27
CVSS 3.xLOW 3.3
CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0LOW 1.7
CVSS:2.0/AV:L/AC:L/Au:S/C:P/I:N/A:N
References
CVE-2022-2989
HIGH7.1

An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

Published: 2022-09-13Modified: 2026-06-17
CVSS 3.xHIGH 7.1
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
GHSA-4wjj-jwc9-2x96
HIGH7.1

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

Published: 2022-09-14Modified: 2025-06-05
CVSS 3.xHIGH 7.1
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
GHSA-rprg-4v7q-87v7
LOW3.3

Buildah (as part of Podman) vulnerable to Path Traversal

Published: 2022-12-08Modified: 2024-05-20
CVSS 3.xLOW 3.3
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References