Search for packages
| purl | pkg:deb/debian/libpod@3.0.1%2Bdfsg1-3%2Bdeb11u2?distro=bullseye |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-24f4-v4pk-g7bh | Podman's default inheritable capabilities for linux container not empty A bug was found in Podman where containers were created with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container's bounding set. |
CVE-2022-27649
GHSA-qvf8-p83w-v58j |
| VCID-tgmf-r176-juce | Podman publishes a malicious image to public registries Podman is a tool for managing OCI containers and pods. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service. |
CVE-2022-1227
GHSA-66vw-v2x9-hw75 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:14:18.010752+00:00 | Debian Importer | Fixing | VCID-tgmf-r176-juce | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T08:52:59.298805+00:00 | Debian Importer | Fixing | VCID-24f4-v4pk-g7bh | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:22:17.409138+00:00 | Debian Importer | Fixing | VCID-tgmf-r176-juce | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T17:57:41.153969+00:00 | Debian Importer | Fixing | VCID-24f4-v4pk-g7bh | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:29:16.474149+00:00 | Debian Importer | Fixing | VCID-24f4-v4pk-g7bh | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:29:16.431837+00:00 | Debian Importer | Fixing | VCID-tgmf-r176-juce | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |