GHSA-wp7w-vx86-vj9h
Podman Elevated Container Privileges
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/containers/podman | < 0.6.1 | 0.6.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.
References
External links from the advisory. They lead to third-party sites.