Red Hat Security AdvisoryRHSA-2024:2090
container-tools:rhel8 security update
Released 2024-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+21745+f5f35196.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+21745+f5f35196.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+21745+f5f35196.s390x::container-tools:rhel8 +47
Fixes 1 record
Priority HIGH 72
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00457 · Published 2024-03-18 · Partial fix · 8090020240413110917.d7b6f4b7, 8090020240417184044.e7857ab1 +17 CWE-59
