Fedora 27 : obs-build / osc (2018-fac5420dd1)

New version of osc and obs-build including fix for CVE-2017-14804 and support for container builds using buildah and podman. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clea...

Fedora Update for podman FEDORA-2018-6243646704

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: podman-0.7.2-2.git4ca4c5f.fc28

Manage Pods, Containers and Container Images libpod provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

podman elevation of privilege vulnerability

libpod is a library for running OCI-based containers in Pods. podman is one of the tools for managing Pods. A security vulnerability exists in podman 0.6.1 and earlier versions. An attacker can exploit the vulnerability to enable containers to gain elevated privileges...

Fedora 27 : podman (2018-5142d70592)

Weekly release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Netwo...

Fedora Update for podman FEDORA-2018-5142d70592

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: podman-0.6.4-1.gitd5beb2f.fc27

Manage Pods, Containers and Container Images libpod provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

CVE-2018-10856

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

CVE-2018-10856

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

Code injection

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

CVE-2018-10856

The CVE-2018-10856 issue affects podman prior to 0.6.1, where capabilities are not dropped when running a container as non-root, allowing unnecessary privileges. This is supported by multiple connected advisories (e.g., RHSA-2018:2037, GHSA-WP7W-VX86-VJ9H, OpenVAS feeds, and Fedora updates). Impa...

CVE-2018-10856

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

CVE-2018-10856

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

PT-2018-10144 · Red Hat · Podman

Name of the Vulnerable Software and Affected Versions: podman versions prior to 0.6.1 Description: The issue arises from podman not dropping capabilities when a container is executed as a non-root user, resulting in unnecessary privileges being granted to the container. Recommendations: For...

CVE-2018-10856: Execution with Unnecessary Privileges

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...

Fedora Update for podman FEDORA-2018-2b96ea9fec

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: podman-0.6.4-1.gitd5beb2f.fc28

Manage Pods, Containers and Container Images libpod provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

RHEL 7 : podman (RHSA-2018:2037)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:2037 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

Moderate: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

podman: Containers run as non-root users do not drop capabilities

It has been discovered that podman does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container...