Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1146-1

Опубликовано: 08 апр. 2024
Источник: suse-cvrf

Описание

Security update for podman

This update for podman fixes the following issues:

  • CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)

Список пакетов

Container suse/sle-micro/5.5:latest
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-EC2-llc
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Server-5-0-EC2-ltd
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-Azure
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-BYOS
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-EC2
podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Micro-5-5-GCE
podman-4.8.3-150500.3.9.1
SUSE Linux Enterprise Micro 5.5
podman-4.8.3-150500.3.9.1
podman-docker-4.8.3-150500.3.9.1
podman-remote-4.8.3-150500.3.9.1
podmansh-4.8.3-150500.3.9.1
SUSE Linux Enterprise Module for Containers 15 SP5
podman-4.8.3-150500.3.9.1
podman-docker-4.8.3-150500.3.9.1
podman-remote-4.8.3-150500.3.9.1
podmansh-4.8.3-150500.3.9.1
openSUSE Leap 15.5
podman-4.8.3-150500.3.9.1
podman-docker-4.8.3-150500.3.9.1
podman-remote-4.8.3-150500.3.9.1
podmansh-4.8.3-150500.3.9.1

Ссылки

Описание

A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.

Затронутые продукты
Container suse/sle-micro/5.5:latest:podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:podman-4.8.3-150500.3.9.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:podman-4.8.3-150500.3.9.1
Ссылки