Описание
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-github-containers-buildah | unfixed | package |
Примечания
https://bugzilla.redhat.com/show_bug.cgi?id=2144983
Negligible security impact
Связанные уязвимости
CVSS3: 5.3
ubuntu
больше 2 лет назад
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
CVSS3: 5.9
redhat
больше 2 лет назад
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
CVSS3: 5.3
nvd
больше 2 лет назад
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.
CVSS3: 5.3
github
больше 2 лет назад
Buildah (as part of Podman) vulnerable to Link Following
