Red Hat Security AdvisoryRHSA-2024:2084
container-tools:4.0 security update
Released 2024-04-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.0.1-38.module+el8.9.0+21673+408ce8ab.aarch64::container-tools:4.0, aardvark-dns-2:1.0.1-38.module+el8.9.0+21673+408ce8ab.ppc64le::container-tools:4.0, aardvark-dns-2:1.0.1-38.module+el8.9.0+21673+408ce8ab.s390x::container-tools:4.0 +47
Fixes 1 record
Priority HIGH 72
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00457 · Published 2024-03-18 · Partial fix · 8090020240413110917.d7b6f4b7, 8090020240417184044.e7857ab1 +17 CWE-59
