GHSA-66vw-v2x9-hw75 Podman publishes a malicious image to public registries

• Go github.com/containers/podman/v3: < 3.4 → fixed in 3.4 • Go github.com/containers/psgo: < 1.7.2 → fixed in 1.7.2

Podman is a tool for managing OCI containers and pods. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.