Podman could be made to expose sensitive information or execute binary code.. ========================================================================== Ubuntu Security Notice USN-6295-1 August 16, 2023 libpod vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Podman could be made to expose sensitive information or execute binary code. Software Description: - libpod: engine to run OCI-based containers in Pods Details: It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: podman 3.4.4+ds1-1ubuntu1.22.04.2 podman-docker 3.4.4+ds1-1ubuntu1.22.04.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6295-1 CVE-2022-2989 Package Information: https://launchpad.net/ubuntu/+source/libpod/3.4.4+ds1-1ubuntu1.22.04.2 . Podman may leak confidential data or run executable files on Ubuntu 22.04 LTS. Implement a fix for this vulnerability immediately!. Podman Vulnerability, Ubuntu 22.04, Libpod Threat, Sensitive Information Leak. . Severity: Critical. LinuxSecurity.com Team
Podman could be made to pull an untrusted image.. =========================================================================Ubuntu Security Notice USN-6170-1 June 16, 2023 libpod vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Podman could be made to pull an untrusted image. Software Description: - libpod: engine to run OCI-based containers in Pods Details: It was discovered that Podman incorrectly handled certain images. An attacker could possibly use this issue to pull an untrusted image. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: podman 3.4.4+ds1-1ubuntu1.22.04.1 podman-docker 3.4.4+ds1-1ubuntu1.22.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6170-1 https://bugs.launchpad.net/ubuntu/+source/libpod/+bug/2007972 Package Information: https://launchpad.net/ubuntu/+source/libpod/3.4.4+ds1-1ubuntu1.22.04.1 . Security flaws in Podman can potentially enable unauthorized image retrievals in Ubuntu 22.04 LTS. Apply updates to safeguard your environment.. Podman Vulnerabilities, Ubuntu Security, Container Vulnerability Alert. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.