—
GO-2023-1544
Podman has Files or Directories Accessible to External Parties in github.com/containers/libpod
Quick fix
GO-2023-1544 — github.com/containers/libpod/v2: upgrade to the fixed version with the command below.
go get github.com/containers/libpod/v2@v2.0.6Details
Podman has Files or Directories Accessible to External Parties in github.com/containers/libpod
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/containers/libpod
Introduced in:
1.6.0No fixed version published yet for github.com/containers/libpod (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/containers/libpod/v2
Introduced in:
0Fixed in: 2.0.6Fix
go get github.com/containers/libpod/v2@v2.0.6References
- https://github.com/advisories/GHSA-vmhj-p9hw-vgrf[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-1726[ADVISORY]
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00097.html[WEB]
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00103.html[WEB]
- https://access.redhat.com/errata/RHSA-2020:0680[WEB]
- https://access.redhat.com/errata/RHSA-2020:1650[WEB]
- https://access.redhat.com/security/cve/CVE-2020-1726[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=1801152[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1726[WEB]
- https://github.com/containers/podman/commit/c140ecdc9b416ab4efd4d21d14acd63b6adbdd42[WEB]