CVE-2022-2739
Fixed in a distro release EPSS <1%
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables.
Products: redhat enterprise_linux_server, redhat enterprise_linux_workstation, podman_project podman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras other 7 | podman | 0:1.6.4-36.el7_9 |
| Red Hat rhel extras other 7 | podman-debuginfo | 0:1.6.4-36.el7_9 |
| Red Hat rhel extras other 7 | podman-docker | 0:1.6.4-36.el7_9 |