RHSA-2022:6119: Moderate: podman security and bug fix update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.Security Fix(es): podman: Security regression of CVE-2020-8945 due to source code management issue (CVE-2022-2738) podman: Security regression of CVE-2020-14370 due to source code management issue (CVE-2022-2739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): podman-1.6.4-32 prints a Error: read unixpacket when running in interactive mode (BZ#2087994) systemd managed container doesn't start serving web traffic despite of starting on system startup. (BZ#2096449) Can not Add url with podman build (BZ#2112217)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:6119?
RHSA-2022:6119 addresses a security regression of CVE-2020-8945 affecting the Podman tool.
How do I fix RHSA-2022:6119?
To fix RHSA-2022:6119, update Podman to version 1.6.4-36.el7_9 or later.
Which systems are affected by RHSA-2022:6119?
RHSA-2022:6119 affects Red Hat Enterprise Linux systems utilizing Podman versions prior to 1.6.4-36.el7_9.
What products are impacted by RHSA-2022:6119?
RHSA-2022:6119 impacts the Podman, Podman-debuginfo, and Podman-docker packages.
What is the nature of the vulnerability in RHSA-2022:6119?
The vulnerability in RHSA-2022:6119 could potentially allow unauthorized access due to misconfiguration in Podman's security settings.