Most recent entries from all

ALSA-2022:1762 — Important: container-tools:rhel8 security, bug fix, and enhancement update

Affected: AlmaLinux:8: aardvark-dns, AlmaLinux:8: buildah, AlmaLinux:8: buildah-tests, AlmaLinux:8: cockpit-podman, AlmaLinux:8: conmon, AlmaLinux:8: container-selinux, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: containers-common, AlmaLinux:8: crit, AlmaLinux:8: criu and 24 more

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * psgo: Privilege escalation in 'podman top' (CVE-2022-1227) * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649) * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650) * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03685

Withdrawn: BELL-CVE-2022-1227 — CVE-2022-1227 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-11600

fkie_cve-2022-1227

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

GHSA-66vw-v2x9-hw75 — Podman publishes a malicious image to public registries

Affected: Go: github.com/containers/podman/v3, Go: github.com/containers/psgo

Podman is a tool for managing OCI containers and pods. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.

gsd-2022-1227

msrc_CVE-2022-1227 — A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public…

msrc_CVE-2022-1227

openSUSE-SU-2024:12400-1 — podman-4.2.1-2.1 on GA media

podman-4.2.1-2.1 on GA media

RHSA-2022:2190 — Red Hat Security Advisory: podman security update

psgo: Privilege escalation in 'podman top'

SUSE-SU-2022:2839-1 — Security update for podman

Security update for podman

UBUNTU-CVE-2022-1227

Affected: Ubuntu:20.04:LTS: golang-github-containers-psgo, Ubuntu:22.04:LTS: golang-github-containers-psgo, Ubuntu:24.04:LTS: golang-github-containers-psgo, Ubuntu:25.10: golang-github-containers-psgo, Ubuntu:26.04:LTS: golang-github-containers-psgo