UBUNTU-CVE-2026-44517

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left ...

CVE-2026-44517

creationtimestamp| type| source ---|---|--- 2026-06-15 12:08:38+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3modarvnx3m26 2026-06-15 21:25:02+00:00| seen| https://bsky.app/profile/canartuc.com/post/3moe7usgnrr2l 2026-06-22 13:09:41+00:00| seen|...