Red Hat Security Advisory

RHSA-2022:4816

container-tools:3.0 security update

Released 2022-05-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+14872+9efa52a3.aarch64::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+14872+9efa52a3.ppc64le::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+14872+9efa52a3.s390x::container-tools:3.0 +47

TI-2022-01114 CVE-2022-1227 · GHSA-66vw-v2x9-hw75

MEDIUM 45

A privilege escalation flaw was found in Podman.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04171 Published 2022-04-29 Partial fix · 3.4, 1.7.2 CWE-281

TI-2022-10630 CVE-2022-27649 · GHSA-qvf8-p83w-v58j

LOW 36

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01429 Published 2022-04-04 Partial fix · 4.0.3 CWE-276

TI-2022-10632 CVE-2022-27651 · GHSA-c3g4-w6cv-6v7h

LOW 33

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.01255 Published 2022-04-04 Partial fix · 1.25.0 CWE-276