Go/github.com/containers/podman/v4 CVE-2022-2989: high 7.1, EPSS 0.32%
Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification
Action: Upgrade github.com/containers/podman/v4 to 4.2.0 or later.
go get github.com/containers/podman/v4@v4.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.0 | - |
Fixed versions
| 4.2.0 |
Sources
- osv: GHSA-4wjj-jwc9-2x96
- https://nvd.nist.gov/vuln/detail/CVE-2022-2989
- https://github.com/containers/podman/pull/15618
- https://github.com/containers/podman/pull/15677
- https://github.com/containers/podman/pull/15696
- https://access.redhat.com/errata/RHSA-2022:7822
- https://access.redhat.com/errata/RHSA-2022:8008
- https://access.redhat.com/errata/RHSA-2022:8431
- https://access.redhat.com/security/cve/CVE-2022-2989
- https://bugzilla.redhat.com/show_bug.cgi?id=2121445
- https://github.com/containers/podman
- https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation
CVE-2022-2989 · published · modified · JSON