A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade toolboxUpgrade udicaUpgrade cockpit-podmanUpgrade runcUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade critUpgrade oci-systemd-hookUpgrade python3-criuUpgrade criuUpgrade container-selinux | May 13, 2022 | Mar 31, 2020 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 31, 2020 |
| Centos_linux | — | Upgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade python-podman-apiUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade podman-remoteUpgrade skopeo-testsUpgrade udicaUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade critUpgrade python3-criuUpgrade podman-dockerUpgrade podmanUpgrade container-selinuxUpgrade oci-umount-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade criuUpgrade podman-debugsourceUpgrade oci-systemd-hookUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade buildahUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade toolboxUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade buildah-testsUpgrade oci-umountUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade skopeoUpgrade containers-common | Apr 29, 2020 | Mar 31, 2020 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade buildahUpgrade container-selinuxUpgrade conmonUpgrade podman-dockerUpgrade cockpit-podmanUpgrade buildah-testsUpgrade python-podman-apiUpgrade podman-testsUpgrade udicaUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade runcUpgrade python3-criuUpgrade podman-remoteUpgrade skopeoUpgrade criuUpgrade oci-umountUpgrade oci-systemd-hookUpgrade critUpgrade podmanUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeo-tests | Oct 5, 2022 | Mar 26, 2020 |
| Redhat Openshift | — | Upgrade pivotUpgrade postgresql-apb-roleUpgrade dracutUpgrade python-google-authUpgrade libunwindUpgrade python-botocoreUpgrade containernetworking-pluginsUpgrade openshift-clientsUpgrade mysql-apb-roleUpgrade python-openstacksdkUpgrade ignitionUpgrade ansible-runner-httpUpgrade atomic-openshift-service-idlerUpgrade apb-base-scriptsUpgrade python-pyroute2Upgrade conmonUpgrade openshift-ansibleUpgrade jenkins-2-pluginsUpgrade ipxeUpgrade python-certifiUpgrade coreos-installerUpgrade apbUpgrade python-pysocksUpgrade faqUpgrade buildahUpgrade jenkinsUpgrade atomic-enterprise-service-catalogUpgrade openshiftUpgrade kibanaUpgrade python-clickUpgrade protobufUpgrade python-voluptuousUpgrade grpcUpgrade podmanUpgrade tiniUpgrade dumb-initUpgrade inotify-toolsUpgrade python-elasticsearchUpgrade toolboxUpgrade python-daemonUpgrade redhat-release-coreosUpgrade python-dictdifferUpgrade python-cachetoolsUpgrade skopeoUpgrade python-sushyUpgrade machine-config-daemonUpgrade fuse-overlayfsUpgrade console-login-helper-messagesUpgrade cri-toolsUpgrade rust-afterburnUpgrade openstack-ironic-python-agentUpgrade python-urllib3Upgrade python-ruamel-yamlUpgrade openstack-ironic-inspectorUpgrade elastic-curatorUpgrade python-pexpectUpgrade mariadb-apb-roleUpgrade jqUpgrade openstack-ironicUpgrade systemdUpgrade python-string_utilsUpgrade rhosp-director-imagesUpgrade rpm-ostreeUpgrade thriftUpgrade python-psutilUpgrade python-kuryr-libUpgrade ansible-asb-modulesUpgrade python-ruamel-ordereddictUpgrade onigurumaUpgrade nss-altfilesUpgrade python-lockfileUpgrade ansible-runnerUpgrade openshift-eventrouterUpgrade ansible-kubernetes-modulesUpgrade golang-github-prometheus-promuUpgrade python-requests-unixsocketUpgrade libnftnlUpgrade python-ptyprocessUpgrade ovn2.12Upgrade python-boto3Upgrade python-typingUpgrade python-openshiftUpgrade openshift-kuryrUpgrade iptablesUpgrade rhcos-toolsUpgrade golang-scl-shimUpgrade ostreeUpgrade python-kubernetesUpgrade python-rsaUpgrade python-s3transferUpgrade python-netaddrUpgrade runc | Dec 29, 2020 | Mar 26, 2020 |
| Redhat_linux | — | Upgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade criuUpgrade containers-commonUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade toolboxUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade conmonUpgrade podmanUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade critUpgrade python3-criuUpgrade slirp4netnsUpgrade oci-umount-debugsourceUpgrade buildah-debugsourceUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-testsUpgrade runcUpgrade python-podman-apiUpgrade oci-systemd-hookUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-remote | Apr 29, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfsUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade criu-debuginfoUpgrade runcUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade criu-debugsourceUpgrade python3-criuUpgrade oci-umount-debugsourceUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade oci-systemd-hook-debugsource | Mar 12, 2024 | Mar 31, 2020 |
| Suse | — | Upgrade podman-cni-configUpgrade podmanUpgrade libcontainers-commonUpgrade buildah | Dec 1, 2020 | Mar 31, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub