Red Hat Security Advisory

RHSA-2022:4651

container-tools:2.0 security update

Released 2022-05-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.2) buildah-1.11.6-8.module+el8.2.0+14896+bf621b2a.aarch64::container-tools:2.0, buildah-1.11.6-8.module+el8.2.0+14896+bf621b2a.ppc64le::container-tools:2.0, buildah-1.11.6-8.module+el8.2.0+14896+bf621b2a.s390x::container-tools:2.0 +47

TI-2022-01114 CVE-2022-1227 · GHSA-66vw-v2x9-hw75

MEDIUM 45

A privilege escalation flaw was found in Podman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04171 Published 2022-04-29 Partial fix · 3.4, 1.7.2 CWE-281

TI-2022-10630 CVE-2022-27649 · GHSA-qvf8-p83w-v58j

LOW 36

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01429 Published 2022-04-04 Partial fix · 4.0.3 CWE-276

TI-2022-10632 CVE-2022-27651 · GHSA-c3g4-w6cv-6v7h

LOW 33

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01255 Published 2022-04-04 Partial fix · 1.25.0 CWE-276