USN-6295-1: Podman vulnerability
Published Aug 16, 2023
·Updated
It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/podman<3.4.4+ds1-1ubuntu1.22.04.2
3.4.4+ds1-1ubuntu1.22.04.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/podman-docker<3.4.4+ds1-1ubuntu1.22.04.2
3.4.4+ds1-1ubuntu1.22.04.2
Ubuntu Ubuntu=22.04
Event History
Aug 16, 2023
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this Podman vulnerability?
The vulnerability ID for this Podman vulnerability is USN-6295-1.
2
What is the impact of this vulnerability?
This vulnerability could allow an attacker to expose sensitive information or execute binary code.
3
How does Podman handle certain supplementary groups incorrectly?
Podman incorrectly handles certain supplementary groups, which can lead to the vulnerability.
4
Which version of Podman is affected by this vulnerability?
Podman version 3.4.4+ds1-1ubuntu1.22.04.2 and earlier versions are affected by this vulnerability.
5
How can I fix this vulnerability?
To fix this vulnerability, update Podman to version 3.4.4+ds1-1ubuntu1.22.04.2 or later.