Linux · Security advisory · April 28, 2022

ELSA-2022-1566: python-podman-api security update

ELSA-2022-1566, released April 28, 2022, fixes 2 CVEs in python-podman-api (version 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+20636+305c97cc). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0143
73rd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
python-podman-apiol 80:1.2.0-0.2.gitd0a45fe.module+el8.5.0+20636+305c97cc

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-27649 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0143 None reported
High CVE-2022-27651 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 8.0 0.0126 None reported
Showing 1 to 2 of 2 1