All errata/c10f2/ALT-PU-2025-4868-4
ALT-PU-2025-4868-4

Package update buildah in branch c10f2

Version1.35.5-alt1
Task#379398
Published2026-02-04
Max severityHIGH
Severity:

Closed issues (15)

BDU:2024-02163
HIGH8.6

Уязвимость программного средства управления и запуска OCI-контейнеров Podman, связанная с ошибками при управлении привилегиями, позволяющая нарушителю повысить свои привилегии

Published: 2024-03-20Modified: 2026-03-04
CVSS 3.xHIGH 8.6
CVSS:3.x/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
BDU:2024-04111
MEDIUM5.9

Уязвимость функции protojson.Unmarshal() пакета golang-google-protobuf языка программирования Golang, связанная с циклом с недостижимым условием выхода, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2024-05-27Modified: 2026-03-04
CVSS 3.xMEDIUM 5.9
CVSS:3.x/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0MEDIUM 5.4
CVSS:2.0/AV:N/AC:H/Au:N/C:N/I:N/A:C
References
BDU:2024-05780
HIGH8.3

Уязвимость библиотеки github.com/containers/image, связанная с неправильной проверкой значения целостности, позволяющая нарушителю вызвать отказ в обслуживании, выполнить атаку обхода локального пути или оказать иное воздействие

Published: 2024-07-29Modified: 2025-04-23
CVSS 3.xHIGH 8.3
CVSS:3.x/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0HIGH 7.6
CVSS:2.0/AV:N/AC:H/Au:N/C:C/I:C/A:C
References
BDU:2025-01013
HIGH8.6

Уязвимость программного средства управления и запуска OCI-контейнеров Podman, связанная с неправильным управлением привилегиями, позволяющая злоумышленнику нарушить доступность защищаемой информации

Published: 2025-02-03Modified: 2026-03-04
CVSS 3.xHIGH 8.6
CVSS:3.x/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2022-27651
MEDIUM6.8

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity.

Published: 2022-04-04Modified: 2024-11-21
CVSS 2.0MEDIUM 4.9
CVSS:2.0/AV:N/AC:M/Au:S/C:P/I:P/A:N
CVSS 3.xMEDIUM 6.8
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
References
CVE-2024-11218
HIGH8.6

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.

Published: 2025-01-22Modified: 2026-04-15
CVSS 3.xHIGH 8.6
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References
CVE-2024-1753
HIGH8.6

A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.

Published: 2024-03-18Modified: 2026-04-15
CVSS 3.xHIGH 8.6
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References
CVE-2024-24786
HIGH7.5

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Published: 2024-03-05Modified: 2026-04-15
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
CVE-2024-3727
HIGH8.3

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Published: 2024-05-14Modified: 2026-04-15
CVSS 3.xHIGH 8.3
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
References
GHSA-5vpc-35f4-r8w6
HIGH8.6

Buildah allows build breakout using malicious Containerfiles and concurrent builds

Published: 2025-01-22Modified: 2025-10-02
CVSS 3.xHIGH 8.6
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References
GHSA-6wvf-f2vw-3425
HIGH8.3

github.com/containers/image allows unexpected authenticated registry accesses

Published: 2024-05-14Modified: 2025-02-25
CVSS 3.xHIGH 8.3
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
References
GHSA-874v-pj72-92f3
MEDIUM6.3

Podman affected by CVE-2024-1753 container escape at build time

Published: 2024-03-28Modified: 2024-11-27
CVSS 3.xMEDIUM 6.3
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 4.0MEDIUM 6.3
CVSS:4.0/CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
References
GHSA-8r3f-844c-mc37
MEDIUM6.6

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Published: 2024-03-06Modified: 2024-11-07
CVSS 3.xMEDIUM 6.6
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 4.0MEDIUM 6.6
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
References
GHSA-c3g4-w6cv-6v7h
MEDIUM6.8

Non-empty default inheritable capabilities for linux container in Buildah

Published: 2022-04-01Modified: 2022-04-19
CVSS 3.xMEDIUM 6.8
CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
References
GHSA-pmf3-c36m-g5cf
NONE

Container escape at build time

Published: 2024-03-19Modified: 2024-04-05
References