Summary
[1.37.6-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]
[2:1.37.6-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.37
(https://github.com/containers/buildah/commit/fd39521)
- Resolves: RHEL-67617
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | buildah | 2:1.37.6-1.0.1.el9_5 |
| Oracle Linux · 9 | buildah-tests | 2:1.37.6-1.0.1.el9_5 |
Vulnerabilities 1
-
High 8.6
Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enume…