1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2022:2834-1

[SUSE-SU-2022:2834-1] Security update for podman

Severity Important
Affected Packages 10
CVEs 3
Info Packages References Vulnerabilities

Security update for podman

This update for podman fixes the following issues:

Updated to version 3.4.7:
- CVE-2022-1227: Fixed an issue that could allow an attacker to publish
a malicious image to a public registry and run arbitrary code in the
victim's context via the 'podman top' command (bsc#1182428).
- CVE-2022-27191: Fixed a potential crash via SSH under specific
configurations (bsc#1197284).
- CVE-2022-21698: Fixed a potential denial of service that affected
servers that used Prometheus instrumentation (bsc#1196338).

Package Affected Version
pkg:rpm/suse/podman?arch=x86_64&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman?arch=s390x&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman?arch=ppc64le&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman?arch=aarch64&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman-remote?arch=x86_64&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman-remote?arch=s390x&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman-remote?arch=ppc64le&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman-remote?arch=aarch64&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman-docker?arch=noarch&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
pkg:rpm/suse/podman-cni-config?arch=noarch&distro=opensuse-leap-15.4 < 3.4.7-150400.4.3.1
ID
SUSE-SU-2022:2834-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2022/suse-su-20222834-1/
Published
2022-08-17T14:52:03
(2 years ago)
Modified
2022-08-17T14:52:03
(2 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/podman?arch=x86_64&distro=opensuse-leap-15.4 suse podman < 3.4.7-150400.4.3.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/podman?arch=s390x&distro=opensuse-leap-15.4 suse podman < 3.4.7-150400.4.3.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/podman?arch=ppc64le&distro=opensuse-leap-15.4 suse podman < 3.4.7-150400.4.3.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/podman?arch=aarch64&distro=opensuse-leap-15.4 suse podman < 3.4.7-150400.4.3.1 opensuse-leap-15.4 aarch64
Affected pkg:rpm/suse/podman-remote?arch=x86_64&distro=opensuse-leap-15.4 suse podman-remote < 3.4.7-150400.4.3.1 opensuse-leap-15.4 x86_64
Affected pkg:rpm/suse/podman-remote?arch=s390x&distro=opensuse-leap-15.4 suse podman-remote < 3.4.7-150400.4.3.1 opensuse-leap-15.4 s390x
Affected pkg:rpm/suse/podman-remote?arch=ppc64le&distro=opensuse-leap-15.4 suse podman-remote < 3.4.7-150400.4.3.1 opensuse-leap-15.4 ppc64le
Affected pkg:rpm/suse/podman-remote?arch=aarch64&distro=opensuse-leap-15.4 suse podman-remote < 3.4.7-150400.4.3.1 opensuse-leap-15.4 aarch64
Affected pkg:rpm/suse/podman-docker?arch=noarch&distro=opensuse-leap-15.4 suse podman-docker < 3.4.7-150400.4.3.1 opensuse-leap-15.4 noarch
Affected pkg:rpm/suse/podman-cni-config?arch=noarch&distro=opensuse-leap-15.4 suse podman-cni-config < 3.4.7-150400.4.3.1 opensuse-leap-15.4 noarch
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date