Go/github.com/containers/podman/v3 CVE-2022-2989: high 7.1, EPSS 0.32%

Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

Action: Upgrade github.com/containers/podman/v3 to 3.0.1 or later.

go get github.com/containers/podman/v3@v3.0.1

Affected

Fixed versions

Sources

• osv: GHSA-4wjj-jwc9-2x96#Go/github.com/containers/podman/v3
• https://nvd.nist.gov/vuln/detail/CVE-2022-2989
• https://github.com/containers/podman/pull/15618
• https://github.com/containers/podman/pull/15677
• https://github.com/containers/podman/pull/15696
• https://access.redhat.com/errata/RHSA-2022:7822
• https://access.redhat.com/errata/RHSA-2022:8008
• https://access.redhat.com/errata/RHSA-2022:8431
• https://access.redhat.com/security/cve/CVE-2022-2989
• https://bugzilla.redhat.com/show_bug.cgi?id=2121445
• https://github.com/containers/podman
• https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation

CVE-2022-2989 · published 2022-09-14T00:00:48Z · modified 2026-02-04T03:35:13.412808Z · JSON