Red Hat Security AdvisoryRHSA-2025:1207
container-tools:rhel8 security update
Released 2025-02-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.s390x::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8 +47
Fixes 1 record
Priority LOW 39
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00365 · Published 2025-01-22 · Partial fix · 1.33.12, 1.35.5 +197 CWE-269
