Red Hat Security Advisory

RHSA-2022:1566

container-tools:2.0 security update

Released 2022-04-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) buildah-1.11.6-10.module+el8.5.0+14796+e4386a39.aarch64::container-tools:2.0, buildah-1.11.6-10.module+el8.5.0+14796+e4386a39.ppc64le::container-tools:2.0, buildah-1.11.6-10.module+el8.5.0+14796+e4386a39.s390x::container-tools:2.0 +47

TI-2022-10630 CVE-2022-27649 · GHSA-qvf8-p83w-v58j

LOW 36

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01429 Published 2022-04-04 Partial fix · 4.0.3 CWE-276

TI-2022-10632 CVE-2022-27651 · GHSA-c3g4-w6cv-6v7h

LOW 33

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01255 Published 2022-04-04 Partial fix · 1.25.0 CWE-276