Summary
[1.31.5-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]
[1:1.31.5-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.31
(https://github.com/containers/buildah/commit/5fd539c)
- Resolves: RHEL-26775
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | buildah | 1:1.31.5-1.0.1.el9_3 |
| Oracle Linux · 9 | buildah-tests | 1:1.31.5-1.0.1.el9_3 |
Vulnerabilities 1
-
High 8.6
Buildah: buildah: container escape via improper bind mount validation
A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mou…