Lucene search

K
fedoraFedoraFEDORA:7044F204E9C8
HistoryApr 03, 2024 - 1:38 a.m.

[SECURITY] Fedora 38 Update: podman-4.9.4-1.fc38

2024-04-0301:38:47
lists.fedoraproject.org
8
fedora 38
podman
container engine
daemonless
docker-cli
manage
pods
containers
images
alias docker
buildah
unix
image storage
user privileges

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

podman (Pod Manager) is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most podman commands can be run as a regular user, without requiring additional privileges. podman uses Buildah(1) internally to create container images. Both tools share image (not container) storage, hence each can use or manipulate images (but not containers) created by the other. Manage Pods, Containers and Container Images %{repo} Simple management tool for pods, containers and images

OSVersionArchitecturePackageVersionFilename
Fedora38anypodman< 4.9.4UNKNOWN

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%