Red Hat Security AdvisoryRHSA-2020:1650
container-tools:rhel8 security, bug fix, and enhancement update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) buildah-1.11.6-7.module+el8.2.0+5856+b8046c6d.aarch64::container-tools:rhel8, buildah-1.11.6-7.module+el8.2.0+5856+b8046c6d.ppc64le::container-tools:rhel8, buildah-1.11.6-7.module+el8.2.0+5856+b8046c6d.s390x::container-tools:rhel8 +47
Fixes 3 records
Priority LOW 31
runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2020-02-12 · Partial fix · 1.0.0-rc9.0.20200122160610-2fc03cc11c77 CWE-706
Priority LOW 30
A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0177 · Published 2020-02-11 · Fixed in 2.0.6 CWE-552
Priority LOW 17
A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00688 · Published 2021-05-27 · Partial fix CWE-400
THREATIST.IORead the docs