Moderate: podman security and bug fix update

2024-06-1100:00:00

errata.almalinux.org

podman

libpod library

container pods

cve-2024-28180

cve-2023-45290

cve-2024-28176

kubernetes

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fixes:

podman: jose-go: improper handling of highly compressed data (CVE-2024-28180)
podman: golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
podman: jose: resource exhaustion (CVE-2024-28176)

OSVersionArchitecturePackageVersionFilename
almalinux9noarchpodman-docker< 4.9.4-4.el9_4podman-docker-4.9.4-4.el9_4.noarch.rpm
almalinux9ppc64lepodman-tests< 4.9.4-4.el9_4podman-tests-4.9.4-4.el9_4.ppc64le.rpm
almalinux9ppc64lepodman-plugins< 4.9.4-4.el9_4podman-plugins-4.9.4-4.el9_4.ppc64le.rpm
almalinux9ppc64lepodman< 4.9.4-4.el9_4podman-4.9.4-4.el9_4.ppc64le.rpm
almalinux9ppc64lepodman-remote< 4.9.4-4.el9_4podman-remote-4.9.4-4.el9_4.ppc64le.rpm
almalinux9x86_64podman< 4.9.4-4.el9_4podman-4.9.4-4.el9_4.x86_64.rpm
almalinux9x86_64podman-tests< 4.9.4-4.el9_4podman-tests-4.9.4-4.el9_4.x86_64.rpm
almalinux9x86_64podman-plugins< 4.9.4-4.el9_4podman-plugins-4.9.4-4.el9_4.x86_64.rpm
almalinux9x86_64podman-remote< 4.9.4-4.el9_4podman-remote-4.9.4-4.el9_4.x86_64.rpm
almalinux9aarch64podman< 4.9.4-4.el9_4podman-4.9.4-4.el9_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	podman-docker	< 4.9.4-4.el9_4	podman-docker-4.9.4-4.el9_4.noarch.rpm
almalinux	9	ppc64le	podman-tests	< 4.9.4-4.el9_4	podman-tests-4.9.4-4.el9_4.ppc64le.rpm
almalinux	9	ppc64le	podman-plugins	< 4.9.4-4.el9_4	podman-plugins-4.9.4-4.el9_4.ppc64le.rpm
almalinux	9	ppc64le	podman	< 4.9.4-4.el9_4	podman-4.9.4-4.el9_4.ppc64le.rpm
almalinux	9	ppc64le	podman-remote	< 4.9.4-4.el9_4	podman-remote-4.9.4-4.el9_4.ppc64le.rpm
almalinux	9	x86_64	podman	< 4.9.4-4.el9_4	podman-4.9.4-4.el9_4.x86_64.rpm
almalinux	9	x86_64	podman-tests	< 4.9.4-4.el9_4	podman-tests-4.9.4-4.el9_4.x86_64.rpm
almalinux	9	x86_64	podman-plugins	< 4.9.4-4.el9_4	podman-plugins-4.9.4-4.el9_4.x86_64.rpm
almalinux	9	x86_64	podman-remote	< 4.9.4-4.el9_4	podman-remote-4.9.4-4.el9_4.x86_64.rpm
almalinux	9	aarch64	podman	< 4.9.4-4.el9_4	podman-4.9.4-4.el9_4.aarch64.rpm