CVE-2022-4122
Fixed in a distro release EPSS <1%CVSS 5.3
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
Products: podman_project podman, fedoraproject fedora
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/containers/podman | no fix |
| Go | github.com/containers/podman/v2 | no fix |
| Go | github.com/containers/podman/v3 | no fix |
| Go | github.com/containers/podman/v4 | 4.5.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | golang-github-containers-buildah | no fix |
| Debian 13 | golang-github-containers-buildah | no fix |
| Debian 14 | golang-github-containers-buildah | no fix |
| Red Hat Enterprise Linux 9 | podman | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-debuginfo | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-debugsource | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-docker | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-plugins | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-plugins-debuginfo | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-remote | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-remote-debuginfo | 2:5.2.2-1.el9 |
| Red Hat Enterprise Linux 9 | podman-tests | 2:5.2.2-1.el9 |
| Red Hat rhel eus 8.8 | aardvark-dns | 2:1.5.0-2.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | buildah | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | buildah-debuginfo | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | buildah-debugsource | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | buildah-tests | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | buildah-tests-debuginfo | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | cockpit-podman | 0:63.1-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | conmon | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | conmon-debuginfo | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | conmon-debugsource | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | container-selinux | 2:2.229.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | containernetworking-plugins | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | containernetworking-plugins-debuginfo | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | containernetworking-plugins-debugsource | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | containers-common | 2:1-65.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | crit | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | criu | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | criu-debuginfo | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | criu-debugsource | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | criu-devel | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | criu-libs | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | criu-libs-debuginfo | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | crun | 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | crun-debuginfo | 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | crun-debugsource | 0:1.8.4-2.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | fuse-overlayfs | 0:1.11-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | fuse-overlayfs-debuginfo | 0:1.11-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | fuse-overlayfs-debugsource | 0:1.11-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | libslirp | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | libslirp-debuginfo | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | libslirp-debugsource | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | libslirp-devel | 0:4.4.0-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | netavark | 2:1.5.1-3.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | oci-seccomp-bpf-hook | 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | oci-seccomp-bpf-hook-debuginfo | 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | oci-seccomp-bpf-hook-debugsource | 0:1.2.8-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-catatonit | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-catatonit-debuginfo | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-debuginfo | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-debugsource | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-docker | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-gvproxy | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-gvproxy-debuginfo | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-plugins | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-plugins-debuginfo | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-remote | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-remote-debuginfo | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | podman-tests | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | python-podman | 0:4.4.1-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | python3-criu | 0:3.15-4.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | python3-podman | 0:4.4.1-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | runc | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | runc-debuginfo | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | runc-debugsource | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | skopeo | 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | skopeo-tests | 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | slirp4netns | 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | slirp4netns-debuginfo | 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | slirp4netns-debugsource | 0:1.2.0-3.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | toolbox | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | toolbox-debuginfo | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | toolbox-debugsource | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | toolbox-tests | 0:0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 |
| Red Hat rhel eus 8.8 | udica | 0:0.2.6-20.module+el8.8.0+21741+dd5be1e7 |
| Rocky Linux 9 | podman | 4:5.2.2-13.el9_5 |
| Ubuntu 22.04 LTS | golang-github-containers-buildah | no fix |
| Ubuntu 25.10 | golang-github-containers-buildah | no fix |
| Ubuntu 26.10 | golang-github-containers-buildah | no fix |
| Ubuntu Pro 24.04 LTS | golang-github-containers-buildah | no fix |
| Ubuntu Pro 26.04 LTS | golang-github-containers-buildah | no fix |