Red Hat Security Advisory

RHSA-2022:1407

container-tools:2.0 security and bug fix update

Released 2022-04-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.4) buildah-1.11.6-9.module+el8.4.0+14792+f44be4c2.aarch64::container-tools:2.0, buildah-1.11.6-9.module+el8.4.0+14792+f44be4c2.ppc64le::container-tools:2.0, buildah-1.11.6-9.module+el8.4.0+14792+f44be4c2.s390x::container-tools:2.0 +47

TI-2022-10630 CVE-2022-27649 · GHSA-qvf8-p83w-v58j

LOW 36

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01429 Published 2022-04-04 Partial fix · 4.0.3 CWE-276

TI-2022-10632 CVE-2022-27651 · GHSA-c3g4-w6cv-6v7h

LOW 33

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01255 Published 2022-04-04 Partial fix · 1.25.0 CWE-276