—
GO-2024-2766
Information disclosure in podman in github.com/containers/libpod
Quick fix
GO-2024-2766 — github.com/containers/libpod/v2: upgrade to the fixed version with the command below.
go get github.com/containers/libpod/v2@v2.0.5Details
Information disclosure in podman in github.com/containers/libpod
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/containers/libpod
Introduced in:
0No fixed version published yet for github.com/containers/libpod (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/containers/libpod/v2
Introduced in:
0Fixed in: 2.0.5Fix
go get github.com/containers/libpod/v2@v2.0.5References
- https://github.com/advisories/GHSA-c3wv-qmjj-45r6[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-14370[ADVISORY]
- https://bugzilla.redhat.com/show_bug.cgi?id=1874268[WEB]
- https://github.com/containers/podman/commit/a7e864e6e7de894d4edde4fff00e53dc6a0b5074[WEB]
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G6BPCZX4ASKNONL3MSCK564IVXNYSKLP[WEB]
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y74V7HGQBNLT6XECCSNZNFZIB7G7XSAR[WEB]
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4Y2FSGQWP4AFT5AZ6UBN6RKHVXUBRFV[WEB]