RHSA-2020:2117HighCVSS 8.8

Red Hat Security Advisory: podman security update

Published
May 12, 2020
Last Modified
August 6, 2026

🔗 CVE IDs covered (2)

CVE-2020-8945 →CVE-2020-10696 →

📋 Description

CVE-2020-8945 — proglottis/gpgme: Use-after-free in GPGME bindings during container image pull CVE-2020-10696 — buildah: Crafted input tar file may lead to local file overwrite during image build process

🎯 Affected products9

  • Red Hat Enterprise Linux 7 Extras
  • podman-0:1.6.4-18.el7_8.ppc64le as a component of Red Hat Enterprise Linux 7 Extras
  • podman-0:1.6.4-18.el7_8.s390x as a component of Red Hat Enterprise Linux 7 Extras
  • podman-0:1.6.4-18.el7_8.src as a component of Red Hat Enterprise Linux 7 Extras
  • podman-0:1.6.4-18.el7_8.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • podman-debuginfo-0:1.6.4-18.el7_8.ppc64le as a component of Red Hat Enterprise Linux 7 Extras
  • podman-debuginfo-0:1.6.4-18.el7_8.s390x as a component of Red Hat Enterprise Linux 7 Extras
  • podman-debuginfo-0:1.6.4-18.el7_8.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • podman-docker-0:1.6.4-18.el7_8.noarch as a component of Red Hat Enterprise Linux 7 Extras

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (5)