Red Hat Security AdvisoryRHSA-2024:2097
container-tools:4.0 security update
Released 2024-04-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) aardvark-dns-2:1.0.1-29.module+el8.6.0+21719+09b58c97.aarch64::container-tools:4.0, aardvark-dns-2:1.0.1-29.module+el8.6.0+21719+09b58c97.ppc64le::container-tools:4.0, aardvark-dns-2:1.0.1-29.module+el8.6.0+21719+09b58c97.s390x::container-tools:4.0 +47
Fixes 1 record
Priority HIGH 72
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00457 · Published 2024-03-18 · Partial fix · 8090020240413110917.d7b6f4b7, 8090020240417184044.e7857ab1 +17 CWE-59
