Moderate: podman security update

2023-12-1200:00:00

errata.almalinux.org

podman

container pods

kubernetes

security update

golang

tls

html

script contexts

cve

cvss

acknowledgments

references

unix

0.001 Low

EPSS

Percentile

37.1%

JSON

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)
golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)
golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)
golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchpodman-docker< 4.6.1-7.el9_3podman-docker-4.6.1-7.el9_3.noarch.rpm
almalinux9ppc64lepodman-plugins< 4.6.1-7.el9_3podman-plugins-4.6.1-7.el9_3.ppc64le.rpm
almalinux9ppc64lepodman< 4.6.1-7.el9_3podman-4.6.1-7.el9_3.ppc64le.rpm
almalinux9ppc64lepodman-remote< 4.6.1-7.el9_3podman-remote-4.6.1-7.el9_3.ppc64le.rpm
almalinux9ppc64lepodman-gvproxy< 4.6.1-7.el9_3podman-gvproxy-4.6.1-7.el9_3.ppc64le.rpm
almalinux9ppc64lepodman-tests< 4.6.1-7.el9_3podman-tests-4.6.1-7.el9_3.ppc64le.rpm
almalinux9aarch64podman-gvproxy< 4.6.1-7.el9_3podman-gvproxy-4.6.1-7.el9_3.aarch64.rpm
almalinux9aarch64podman< 4.6.1-7.el9_3podman-4.6.1-7.el9_3.aarch64.rpm
almalinux9aarch64podman-plugins< 4.6.1-7.el9_3podman-plugins-4.6.1-7.el9_3.aarch64.rpm
almalinux9aarch64podman-remote< 4.6.1-7.el9_3podman-remote-4.6.1-7.el9_3.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	podman-docker	< 4.6.1-7.el9_3	podman-docker-4.6.1-7.el9_3.noarch.rpm
almalinux	9	ppc64le	podman-plugins	< 4.6.1-7.el9_3	podman-plugins-4.6.1-7.el9_3.ppc64le.rpm
almalinux	9	ppc64le	podman	< 4.6.1-7.el9_3	podman-4.6.1-7.el9_3.ppc64le.rpm
almalinux	9	ppc64le	podman-remote	< 4.6.1-7.el9_3	podman-remote-4.6.1-7.el9_3.ppc64le.rpm
almalinux	9	ppc64le	podman-gvproxy	< 4.6.1-7.el9_3	podman-gvproxy-4.6.1-7.el9_3.ppc64le.rpm
almalinux	9	ppc64le	podman-tests	< 4.6.1-7.el9_3	podman-tests-4.6.1-7.el9_3.ppc64le.rpm
almalinux	9	aarch64	podman-gvproxy	< 4.6.1-7.el9_3	podman-gvproxy-4.6.1-7.el9_3.aarch64.rpm
almalinux	9	aarch64	podman	< 4.6.1-7.el9_3	podman-4.6.1-7.el9_3.aarch64.rpm
almalinux	9	aarch64	podman-plugins	< 4.6.1-7.el9_3	podman-plugins-4.6.1-7.el9_3.aarch64.rpm
almalinux	9	aarch64	podman-remote	< 4.6.1-7.el9_3	podman-remote-4.6.1-7.el9_3.aarch64.rpm