ALSA-2023:2282
ALSA-2023:2282 · Moderate: podman security and bug fix update
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
podman AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 2:4.4.1-3.el9
Mettez à jour vers 2:4.4.1-3.el9
podman-docker AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 2:4.4.1-3.el9
Mettez à jour vers 2:4.4.1-3.el9
podman-gvproxy AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 2:4.4.1-3.el9
Mettez à jour vers 2:4.4.1-3.el9
podman-plugins AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 2:4.4.1-3.el9
Mettez à jour vers 2:4.4.1-3.el9
podman-remote AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 2:4.4.1-3.el9
Mettez à jour vers 2:4.4.1-3.el9
podman-tests AlmaLinux:9
- Plages de versions concernées
- ECOSYSTEM: < 2:4.4.1-3.el9
Mettez à jour vers 2:4.4.1-3.el9
Sources originales
- https://access.redhat.com/errata/RHSA-2023:2282
- https://access.redhat.com/security/cve/CVE-2022-30629
- https://access.redhat.com/security/cve/CVE-2022-41717
- https://bugzilla.redhat.com/2092793
- https://bugzilla.redhat.com/2161274
- https://errata.almalinux.org/9/ALSA-2023-2282.html
- https://osv.dev/vulnerability/ALSA-2023:2282