Red Hat Security AdvisoryRHSA-2025:1275
container-tools:rhel8 security update
Released 2025-02-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.aarch64::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.s390x::container-tools:rhel8 +47
Fixes 1 record
Priority LOW 39
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00365 · Published 2025-01-22 · Partial fix · 1.33.12, 1.35.5 +197 CWE-269