Описание
Security update for buildah
This update for buildah fixes the following issues:
- CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container (bsc#1197870).
Update to version 1.25.1.
The following non-security bugs were fixed:
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
Список пакетов
SUSE Linux Enterprise Module for Containers 15 SP4
buildah-1.25.1-150400.3.3.28
openSUSE Leap 15.4
buildah-1.25.1-150400.3.3.28
Ссылки
- Link for SUSE-SU-2022:2680-1
- E-Mail link for SUSE-SU-2022:2680-1
- SUSE Security Ratings
- SUSE Bug 1197870
- SUSE CVE CVE-2022-27651 page
Описание
A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity.
Затронутые продукты
SUSE Linux Enterprise Module for Containers 15 SP4:buildah-1.25.1-150400.3.3.28
openSUSE Leap 15.4:buildah-1.25.1-150400.3.3.28
Ссылки
- CVE-2022-27651
- SUSE Bug 1197870