| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/containers/libpod | < 1.6.0 | 1.6.0 |
| github.com/containers/podman | all versions | |
| github.com/containers/podman/v2 | all versions | |
| github.com/containers/podman/v3 | all versions | |
| github.com/containers/podman/v4 | < 1.6.0all versions | 1.6.0 |
| libpod | < 1.6.0 | 1.6.0 |
An issue was discovered in Podman in libpod before 1.6.0. It resolves a symlink in the host context during a copy operation from the container to the host, because an undesired glob operation occurs. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free