Red Hat Security Advisory

RHSA-2022:1793

container-tools:3.0 security and bug fix update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) buildah-1.19.9-3.module+el8.6.0+14694+4f5132e0.aarch64::container-tools:3.0, buildah-1.19.9-3.module+el8.6.0+14694+4f5132e0.ppc64le::container-tools:3.0, buildah-1.19.9-3.module+el8.6.0+14694+4f5132e0.s390x::container-tools:3.0 +47

TI-2022-10631 CVE-2022-27650

LOW 35

A flaw was found in crun where containers were incorrectly started with non-empty default permissions.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0124 Published 2022-04-04 Partial fix CWE-276