Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/podman@3:4.2.0-6.1.rhaos4.12?arch=el8
purl pkg:rpm/redhat/podman@3:4.2.0-6.1.rhaos4.12?arch=el8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-1rsj-pm1p-qbd6
Aliases:
CVE-2022-2880
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-3ypr-ppaw-kkf4
Aliases:
CVE-2022-2879
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-6rzu-td8d-1ycn
Aliases:
CVE-2022-32149
GHSA-69ch-w2m2-3vjp
Multiple vulnerabilities have been discovered in Gitea, the worst of which could lead to denial of service There are no reported fixed by versions.
VCID-azr4-u36f-pbew
Aliases:
CVE-2022-27664
GHSA-69cg-p879-7622
Multiple vulnerabilities have been discovered in Go, the worst of which could result in denial of service. There are no reported fixed by versions.
VCID-h3bw-m2us-cbgz
Aliases:
CVE-2022-32190
Multiple vulnerabilities have been discovered in Go, the worst of which could result in denial of service. There are no reported fixed by versions.
VCID-rtb8-bayb-dfbn
Aliases:
CVE-2022-41715
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-ttsj-3bd1-tfhu
Aliases:
CVE-2022-2989
GHSA-4wjj-jwc9-2x96
Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:57:23.859983+00:00 RedHat Importer Affected by VCID-ttsj-3bd1-tfhu https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2989.json 38.0.0
2026-04-01T13:57:14.474234+00:00 RedHat Importer Affected by VCID-azr4-u36f-pbew https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27664.json 38.0.0
2026-04-01T13:57:12.761134+00:00 RedHat Importer Affected by VCID-h3bw-m2us-cbgz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32190.json 38.0.0
2026-04-01T13:56:53.161253+00:00 RedHat Importer Affected by VCID-rtb8-bayb-dfbn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41715.json 38.0.0
2026-04-01T13:56:51.679197+00:00 RedHat Importer Affected by VCID-1rsj-pm1p-qbd6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2880.json 38.0.0
2026-04-01T13:56:50.639571+00:00 RedHat Importer Affected by VCID-3ypr-ppaw-kkf4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2879.json 38.0.0
2026-04-01T13:56:46.378770+00:00 RedHat Importer Affected by VCID-6rzu-td8d-1ycn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-32149.json 38.0.0