github.com/containers/podman/v3 v3.4.7

Why

• warnVulnerability

  Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

• warnVulnerability

  Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman

• warnVulnerability

  Podman Symlink Vulnerability in github.com/containers/libpod

• warnVulnerability

  Podman Elevated Container Privileges in github.com/containers/podman

• warnVulnerability

  Podman vulnerable to memory-based denial of service in github.com/containers/podman

• warnVulnerability

  Improper Input Validation in Buildah and Podman in github.com/containers/buildah

• warnVulnerability

  Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman

• warnVulnerability

  podman kube play symlink traversal vulnerability in github.com/containers/podman

• warnVulnerability

  Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

• warnVulnerability

  PowerShell Command Injection in Podman HyperV Machine in github.com/containers/podman

• warnVulnerability

  Podman: WORKDIR symlink traversal vulnerability in github.com/containers/podman

• warnVulnerability

  podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

• warnVulnerability

  Podman: Malformed Image can trick podman run into leaking host environment variables into the container in github.com/containers/libpod

• warnVulnerability

  Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman

• warnVulnerability

  Podman: Malformed Image can trick podman run into leaking host environment variables into the container

• warnVulnerability

  Improper Input Validation in Buildah and Podman (fixed in 5.2.4)

• warnVulnerability

  Podman: WORKDIR symlink traversal vulnerability

• warnVulnerability

  Podman vulnerable to memory-based denial of service

What the code does

On its own this is weak signal: plenty of honest libraries read files or talk to the network. What PkgFire watches is a release gaining something the one before it did not.