portage-ng / portage / app-containers / podman / 6.1.4
portage-ng glsa
1 advisory reference app-containers/podman · none place version 6.1.4 in a vulnerable range
▸ GLSA 202407-12 podman: Multiple Vulnerabilities this version unaffected high local 2024-07-05

Multiple vulnerabilities have been discovered in Podman, the worst of which could lead to privilege escalation.

Announced
2024-07-05
Revised
2024-07-05
Access
local
Bugs
#829896 #870931 #896372 #921290 #923751 #927500 #927501
Advisory
https://security.gentoo.org/glsa/202407-12

Affected packages

PackageArchVulnerableUnaffected
app-containers/podman*< 4.9.4>= 4.9.4

Background

Podman is a tool for managing OCI containers and pods with a Docker-compatible CLI.

Description

Please review the referenced CVE identifiers for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Podman users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-containers/podman-4.9.4"

References