Security update for buildah
This update for buildah fixes the following issues: Buildah was updated to version 1.27.1: - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961). - CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864). - CVE-2022-2990: Fixed a possible information disclosure and modification (bsc#1202812).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for buildah fixes the following issues: Buildah was updated to version 1.27.1: - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961). - CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864). - CVE-2022-2990: Fixed a possible information disclosure and modification (bsc#1202812).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1167864
- https://bugzilla.suse.com/1181961
- https://bugzilla.suse.com/1202812
- https://www.suse.com/security/cve/CVE-2020-10696
- https://www.suse.com/security/cve/CVE-2021-20206
- https://www.suse.com/security/cve/CVE-2022-2990
- https://www.suse.com/support/update/announcement/2022/suse-su-20223655-1/