USN-6295-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-6295-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6295-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-6295-1
Related
Published
2023-08-16T17:02:17.631878Z
Modified
2023-08-16T17:02:17.631878Z
Summary
libpod vulnerability
Details

It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code.

References

Affected packages

Ubuntu:22.04:LTS / libpod

Package

Name
libpod
Purl
pkg:deb/ubuntu/libpod@3.4.4+ds1-1ubuntu1.22.04.2?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.4.4+ds1-1ubuntu1.22.04.2

Affected versions

3.*

3.2.1+ds1-2ubuntu3
3.4.4+ds1-1ubuntu1
3.4.4+ds1-1ubuntu1.22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "podman-dbgsym": "3.4.4+ds1-1ubuntu1.22.04.2",
            "podman": "3.4.4+ds1-1ubuntu1.22.04.2",
            "podman-docker": "3.4.4+ds1-1ubuntu1.22.04.2"
        }
    ]
}