Red Hat Security Advisory

RHSA-2020:2116

buildah security and bug fix update

Released 2020-05-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras buildah-1.11.6-11.el7_8

Fixes 2 records

TI-2020-08597 CVE-2020-10696 · GHSA-fx8w-mjvm-hvpc

Path traversal in Red Hat buildah

MEDIUM 43

A path traversal flaw was found in Buildah in versions before 1.14.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02681 Published 2020-03-31 Partial fix · 1.14.4 CWE-22

TI-2020-01649 CVE-2020-1702 · GHSA-f6vj-xx8j-fqmq

Uncontrolled resource consumption in containers/image

LOW 17

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00688 Published 2021-05-27 Partial fix CWE-400