AlmaLinuxALSA-2024:2055Important: buildah security update
8.6 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.
Security Fix(es):
- buildah: full container escape at build time (CVE-2024-1753)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | x86_64 | buildah | < 1.31.5-1.el9_3 | buildah-1.31.5-1.el9_3.x86_64.rpm |
| almalinux | 9 | x86_64 | buildah-tests | < 1.31.5-1.el9_3 | buildah-tests-1.31.5-1.el9_3.x86_64.rpm |
| almalinux | 9 | ppc64le | buildah-tests | < 1.31.5-1.el9_3 | buildah-tests-1.31.5-1.el9_3.ppc64le.rpm |
| almalinux | 9 | ppc64le | buildah | < 1.31.5-1.el9_3 | buildah-1.31.5-1.el9_3.ppc64le.rpm |
| almalinux | 9 | aarch64 | buildah | < 1.31.5-1.el9_3 | buildah-1.31.5-1.el9_3.aarch64.rpm |
| almalinux | 9 | aarch64 | buildah-tests | < 1.31.5-1.el9_3 | buildah-tests-1.31.5-1.el9_3.aarch64.rpm |
| almalinux | 9 | s390x | buildah | < 1.31.5-1.el9_3 | buildah-1.31.5-1.el9_3.s390x.rpm |
| almalinux | 9 | s390x | buildah-tests | < 1.31.5-1.el9_3 | buildah-tests-1.31.5-1.el9_3.s390x.rpm |
Related
8.6 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%