{"schemaVersion":3,"id":"RHSA-2024:9102","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: podman security update","dates":{"published":"2024-11-15T20:28:15.000Z","modified":"2026-10-16T10:05:40.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.3,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","exploitability":4.1,"impact":10,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"podman","name":"podman","label":"podman","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-debuginfo","name":"podman-debuginfo","label":"podman-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-debuginfo","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-debugsource","name":"podman-debugsource","label":"podman-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-debugsource","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-docker","name":"podman-docker","label":"podman-docker","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-docker","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-plugins","name":"podman-plugins","label":"podman-plugins","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-plugins","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-plugins-debuginfo","name":"podman-plugins-debuginfo","label":"podman-plugins-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-plugins-debuginfo","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-remote","name":"podman-remote","label":"podman-remote","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-remote","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-remote-debuginfo","name":"podman-remote-debuginfo","label":"podman-remote-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-remote-debuginfo","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-tests","name":"podman-tests","label":"podman-tests","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-tests","purlType":"rpm","versions":[{"text":"< 2:5.2.2-1.el9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:5.2.2-1.el9","eol":null,"hubHref":null}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:9102","label":"access.redhat.com/errata/RHSA-2024:9102","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","label":"docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","hostname":"docs.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144983","label":"bugzilla.redhat.com/show_bug.cgi?id=2144983","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274767","label":"bugzilla.redhat.com/show_bug.cgi?id=2274767","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292668","label":"bugzilla.redhat.com/show_bug.cgi?id=2292668","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295310","label":"bugzilla.redhat.com/show_bug.cgi?id=2295310","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://issues.redhat.com/browse/RHEL-17776","label":"issues.redhat.com/browse/RHEL-17776","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-18987","label":"issues.redhat.com/browse/RHEL-18987","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-24333","label":"issues.redhat.com/browse/RHEL-24333","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-27171","label":"issues.redhat.com/browse/RHEL-27171","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-28803","label":"issues.redhat.com/browse/RHEL-28803","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-29763","label":"issues.redhat.com/browse/RHEL-29763","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-3092","label":"issues.redhat.com/browse/RHEL-3092","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-32599","label":"issues.redhat.com/browse/RHEL-32599","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-40811","label":"issues.redhat.com/browse/RHEL-40811","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-45979","label":"issues.redhat.com/browse/RHEL-45979","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-48760","label":"issues.redhat.com/browse/RHEL-48760","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-48917","label":"issues.redhat.com/browse/RHEL-48917","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/RHEL-54361","label":"issues.redhat.com/browse/RHEL-54361","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9102.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9102.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4122","label":"access.redhat.com/security/cve/CVE-2022-4122","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4122","label":"www.cve.org/CVERecord?id=CVE-2022-4122","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4122","label":"nvd.nist.gov/vuln/detail/CVE-2022-4122","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/containers/podman/pull/16315","label":"github.com/containers/podman/pull/16315","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3727","label":"access.redhat.com/security/cve/CVE-2024-3727","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3727","label":"www.cve.org/CVERecord?id=CVE-2024-3727","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3727","label":"nvd.nist.gov/vuln/detail/CVE-2024-3727","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24789","label":"access.redhat.com/security/cve/CVE-2024-24789","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24789","label":"www.cve.org/CVERecord?id=CVE-2024-24789","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24789","label":"nvd.nist.gov/vuln/detail/CVE-2024-24789","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24791","label":"access.redhat.com/security/cve/CVE-2024-24791","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24791","label":"www.cve.org/CVERecord?id=CVE-2024-24791","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24791","label":"nvd.nist.gov/vuln/detail/CVE-2024-24791","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://go.dev/cl/591255","label":"go.dev/cl/591255","hostname":"go.dev","tags":["ARTICLE"]},{"url":"https://go.dev/issue/67555","label":"go.dev/issue/67555","hostname":"go.dev","tags":["ARTICLE"]},{"url":"https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ","label":"groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ","hostname":"groups.google.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2022-4122","CVE-2024-24789","CVE-2024-24791","CVE-2024-3727"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-11-15T20:28:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-16T10:05:40.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T08:10:56.342Z","stale":false,"partial":false}}