The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade criuUpgrade containernetworking-pluginsUpgrade runcUpgrade python3-criuUpgrade oci-umountUpgrade critUpgrade oci-systemd-hookUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade toolboxUpgrade udicaUpgrade python-podman-apiUpgrade fuse-overlayfs | May 13, 2022 | Mar 31, 2020 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 31, 2020 |
| Centos_linux | — | Upgrade criu-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debuginfoUpgrade oci-umountUpgrade conmonUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade cockpit-podmanUpgrade toolboxUpgrade fuse-overlayfsUpgrade containers-commonUpgrade oci-umount-debuginfoUpgrade buildah-debuginfoUpgrade skopeoUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade podman-testsUpgrade skopeo-testsUpgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade python-podman-apiUpgrade slirp4netns-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade runcUpgrade podmanUpgrade podman-debugsourceUpgrade podman-remoteUpgrade udicaUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade critUpgrade criu | Apr 29, 2020 | Mar 31, 2020 |
| Debian | — | Upgrade golang-github-containers-buildah | Jul 30, 2024 | Mar 31, 2020 |
| Oracle_linux | — | Upgrade cockpit-podmanUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade buildahUpgrade conmonUpgrade udicaUpgrade podman-testsUpgrade slirp4netnsUpgrade podman-dockerUpgrade container-selinuxUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade oci-systemd-hookUpgrade containers-commonUpgrade podmanUpgrade podman-remoteUpgrade oci-umountUpgrade skopeoUpgrade python3-criuUpgrade runcUpgrade skopeo-testsUpgrade critUpgrade criu | Oct 5, 2022 | Mar 26, 2020 |
| Redhat Openshift | — | Upgrade faqUpgrade cri-toolsUpgrade apbUpgrade libunwindUpgrade grpcUpgrade python-cachetoolsUpgrade python-voluptuousUpgrade podmanUpgrade atomic-openshift-service-idlerUpgrade python-openstacksdkUpgrade apb-base-scriptsUpgrade ansible-runner-httpUpgrade conmonUpgrade rust-afterburnUpgrade jenkinsUpgrade tiniUpgrade python-daemonUpgrade openshift-clientsUpgrade dracutUpgrade dumb-initUpgrade python-botocoreUpgrade python-sushyUpgrade toolboxUpgrade python-google-authUpgrade mysql-apb-roleUpgrade protobufUpgrade coreos-installerUpgrade postgresql-apb-roleUpgrade console-login-helper-messagesUpgrade buildahUpgrade fuse-overlayfsUpgrade ipxeUpgrade inotify-toolsUpgrade python-pysocksUpgrade redhat-release-coreosUpgrade containernetworking-pluginsUpgrade python-elasticsearchUpgrade python-certifiUpgrade skopeoUpgrade python-pyroute2Upgrade machine-config-daemonUpgrade jenkins-2-pluginsUpgrade ignitionUpgrade kibanaUpgrade python-clickUpgrade openshift-ansibleUpgrade atomic-enterprise-service-catalogUpgrade openshiftUpgrade python-dictdifferUpgrade pivotUpgrade nss-altfilesUpgrade jqUpgrade golang-github-prometheus-promuUpgrade python-kuryr-libUpgrade ostreeUpgrade openshift-kuryrUpgrade mariadb-apb-roleUpgrade python-psutilUpgrade libnftnlUpgrade python-boto3Upgrade python-ptyprocessUpgrade thriftUpgrade python-netaddrUpgrade golang-scl-shimUpgrade python-s3transferUpgrade rhcos-toolsUpgrade python-typingUpgrade rpm-ostreeUpgrade python-kubernetesUpgrade rhosp-director-imagesUpgrade python-pexpectUpgrade runcUpgrade openstack-ironic-python-agentUpgrade python-ruamel-yamlUpgrade iptablesUpgrade openstack-ironic-inspectorUpgrade ansible-asb-modulesUpgrade systemdUpgrade python-openshiftUpgrade onigurumaUpgrade openshift-eventrouterUpgrade ansible-runnerUpgrade python-requests-unixsocketUpgrade ansible-kubernetes-modulesUpgrade python-ruamel-ordereddictUpgrade python-rsaUpgrade python-string_utilsUpgrade ovn2.12Upgrade elastic-curatorUpgrade python-urllib3Upgrade openstack-ironicUpgrade python-lockfile | Dec 29, 2020 | Mar 26, 2020 |
| Redhat_linux | — | Upgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade skopeo-debuginfoUpgrade oci-umount-debuginfoUpgrade buildah-testsUpgrade criuUpgrade criu-debugsourceUpgrade skopeoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade podman-dockerUpgrade oci-umountUpgrade conmonUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debugsourceUpgrade podmanUpgrade toolboxUpgrade buildahUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade container-selinuxUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-testsUpgrade slirp4netnsUpgrade runcUpgrade oci-systemd-hookUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade udicaUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade oci-umount-debugsourceUpgrade python-podman-apiUpgrade crit | Apr 29, 2020 | Mar 31, 2020 |
| Rocky_linux | — | Upgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade runcUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade critUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade oci-systemd-hook-debuginfoUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade oci-umount-debuginfoUpgrade oci-umount-debugsourceUpgrade python3-criuUpgrade oci-systemd-hookUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade slirp4netns | Mar 12, 2024 | Mar 31, 2020 |
| Suse | — | Upgrade podman-cni-configUpgrade podmanUpgrade buildahUpgrade libcontainers-common | Dec 1, 2020 | Mar 31, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub