Red Hat Security AdvisoryRHSA-2020:5056
podman security and bug fix update
Released 2020-11-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux 7 Extras podman-1.6.4-26.el7_9, podman-docker-1.6.4-26.el7_9
Fixes 2 records
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01886 · Published 2020-06-17 · Partial fix · 0.3.3 CWE-835
Priority LOW 27
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01402 · Published 2020-09-23 · Partial fix · 2.0.5 CWE-212
