CVE-2018-10856
Fixed in a distro release EPSS <1%CVSS 5.3
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.
Products: libpod_project libpod
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/containers/podman | 0.6.1 |
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| Go | github.com/containers/podman/v2 |
| Go | github.com/containers/podman/v3 |
| Go | github.com/containers/podman/v4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras other 7 | podman | 0:0.6.1-3.git3e0ff12.el7 |
| Red Hat rhel extras other 7 | podman-debuginfo | 0:0.6.1-3.git3e0ff12.el7 |
| openSUSE Tumbleweed | podman | 3.3.1-2.1 |