Description
A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | buildah | Fixed in buildah-1.14.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-github-containers-buildah | 1.11.6-2 | — |
| Debian 13 | golang-github-containers-buildah | 1.11.6-2 | — |
| Debian 12 | golang-github-containers-buildah | 1.11.6-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | buildah | 1.5-4.gite94b4f9.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | buildah-tests | 1.11.6-7.module+el8.2.0+6369+1f4293b4 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | cockpit-podman | 11-1.module+el8.2.0+6369+1f4293b4 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | conmon | 2:2.0.6-1.module+el8.2.0+6368+cf16aa14 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | container-selinux | 2:2.124.0-1.gitf958d0c.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | containernetworking-plugins | 0.7.4-3.git9ebe139.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | crit +2 | 3.12-9.module+el8.2.0+6368+cf16aa14 | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | fuse-overlayfs | 0.3-5.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1926 |
| RHEL 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1926 |
| RHEL 8 | podman +1 | 1.0.0-4.git921f98f.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | podman-tests +1 | 1.6.4-11.module+el8.2.0+6368+cf16aa14 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | python-podman-api | 1.2.0-0.2.gitd0a45fe.module+el8.2.0+6368+cf16aa14 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | skopeo +1 | 1:0.1.32-4.git1715c90.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | skopeo-tests | 1:0.1.40-9.module+el8.2.0+6373+4950d421 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | slirp4netns | 0.1-5.dev.gitc4e1bc5.module+el8.2.0+6370+6fb6c8ca | RHSA-2020:1932, RHSA-2020:1931, RHSA-2020:1926 |
| RHEL 8 | toolbox | 0.0.7-1.module+el8.2.0+6368+cf16aa14 | RHSA-2020:1932, RHSA-2020:1931 |
| RHEL 8 | udica | 0.2.1-2.module+el8.2.0+6368+cf16aa14 | RHSA-2020:1932, RHSA-2020:1931 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | buildah | 1.11.6-11.el7_8 | RHSA-2020:2116 |
| Red Hat Rhel Extras Other 7 | podman +1 | 1.6.4-18.el7_8 | RHSA-2020:2117 |
| Red Hat OpenShift 4 | afterburn +1 | 4.1.1-3.rhaos4.2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ansible-asb-modules | 0.4.1-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ansible-kubernetes-modules | 0.4.0-8.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ansible-runner +1 | 1.3.4-2.el7ar | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ansible-runner-http | 1.0-1.el7ar | RHBA-2020:0582 |
| Red Hat OpenShift 4 | apb +2 | 2.0.3-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | apb-base-scripts | 1.4.2-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | atomic-enterprise-service-catalog +1 | 1:4.4.0-202004260017.git.1.6957195.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | atomic-openshift-service-idler | 4.4.0-202004260017.git.1.e04c72f.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | buildah +1 | 1.11.6-6.rhaos4.4.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | conmon | 2:2.0.15-1.rhaos4.4.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | console-login-helper-messages +2 | 0.16-1.rhaos4.2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | containernetworking-plugins | 0.8.2-2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | coreos-installer +1 | 0-2.rhaos4.4.gite5aa5dc.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | cri-tools | 1.17.0-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | dracut +7 | 049-70.git20200228.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | dumb-init | 1.1.3-12.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | elastic-curator | 5.2.0-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | faq | 0.0.6-4.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | fb303 +11 | 0.9.1-15.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | fuse-overlayfs | 0.7.2-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | golang-scl-shim | 1.13.4-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | grpc +4 | 1.18.0-4.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ignition +1 | 0.35.0-5.rhaos4.4.git7afbeba.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | inotify-tools +1 | 3.20.1-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | iptables +6 | 1.8.4-10.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ipxe +4 | 20181214-5.git133f4c47.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | jenkins | 2.204.2.1580893337-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | jenkins-2-plugins | 4.4.1583444859-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | jq +1 | 1.6-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | kibana | 5.6.16-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | libnftnl +1 | 1.1.5-4.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | libunwind +1 | 1.2.1-5.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | machine-config-daemon | 4.4.0-202004260322.git.1.c95b750.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | mariadb-apb-role | 1.3.7-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | mysql-apb-role | 1.3.6-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | nss-altfiles | 2.18.1-12.rhaos4.2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | oniguruma +1 | 5.9.2-5.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openshift +1 | 4.4.0-202004250654.git.1.ec72d7a.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.4.0-202004250654.git.1.b7a3cf7.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.4.0-202004250654.git.1.1b18194.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openshift-eventrouter | 0.2-4.git7c289cc.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.4.0-201911081316.git.1.05e7ac1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openstack-ironic +4 | 1:13.0.3-0.20191217040142.3e39d7b.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | openstack-ironic-inspector +4 | 9.2.1-0.20200124141914.578ab43.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ostree +3 | 2019.6-2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | ovn2.12 +3 | 2.12.0-32.el7fdn | RHBA-2020:0582 |
| Red Hat OpenShift 4 | pivot | 0.0.5-2.rhaos4.2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | podman +1 | 1.0.2-4.dev.git96ccc2e.rhaos4.1.el8 | RHSA-2020:1449, RHSA-2020:1401, RHSA-2020:1396 |
| Red Hat OpenShift 4 | podman-manpages | 1.4.2-6.rhaos4.2.el8 | RHSA-2020:1401, RHSA-2020:1396, RHBA-2020:0582 |
| Red Hat OpenShift 4 | podman-tests +1 | 1.6.4-10.rhaos4.3.el8 | RHSA-2020:1396, RHBA-2020:0582 |
| Red Hat OpenShift 4 | postgresql-apb-role | 1.3.8-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | pprof +3 | 2.6.3-2.el8+7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | prometheus-promu +1 | 0.5.0-2.git642a960.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | protobuf +8 | 3.6.1-4.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-boto3 +1 | 1.4.0-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-botocore +1 | 1.4.57-5.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-cachetools | 1.0.3-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-certifi +1 | 2018.4.16-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-click | 6.7-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-daemon +1 | 2.1.2-7.el7at | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-dictdiffer +1 | 0.6.1-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-elasticsearch | 5.4.0-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-google-auth +1 | 1.1.1-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-kubernetes +2 | 8.0.1-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-kuryr-lib +3 | 1.1.1-0.20190923160834.41e6964.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-lockfile +1 | 1:0.11.0-10.el7ar | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-netaddr +2 | 0.7.19-8.1.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-openshift +1 | 1:0.8.11-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-openstacksdk +2 | 0.36.1-0.20200225114654.50c9898.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-pexpect +1 | 4.6-1.el7at | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-psutil +1 | 5.4.3-3.el7ar | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-ptyprocess +1 | 0.5.2-3.el7at | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-pyroute2 +1 | 0.5.3-4.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-pysocks +1 | 1.5.7-4.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-requests-unixsocket | 0.1.5-1.el7ar | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-rsa +1 | 3.4.1-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-ruamel-ordereddict +1 | 0.4.9-5.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-ruamel-yaml +1 | 0.15.23-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-s3transfer +1 | 0.1.3-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-string_utils +1 | 0.6.0-2.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-sushy +2 | 2.0.1-0.20200217215525.2f961fc.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-typing +1 | 3.5.2.2-3.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-urllib3 +1 | 1.21.1-1.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python-voluptuous +1 | 0.10.5-2.el7ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python3-ironic-python-agent +1 | 5.0.1-0.20200123140814.025b790.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | python3-kuryr-kubernetes | 4.4.0-202004260017.git.1.42937a1.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | redhat-release-coreos | 44.81-4.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | rhcos-tools | 0.0.0-1.rhaos4.2.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | rhosp-director-images-ppc64le +1 | 16.0-20200110.2.el8ost | RHBA-2020:0582 |
| Red Hat OpenShift 4 | rpm-ostree +2 | 2019.6-8.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | runc | 1.0.0-65.rc10.rhaos4.4.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | skopeo +2 | 1:0.1.40-1.rhaos4.3.el7 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | systemd +7 | 239-27.el8 | RHBA-2020:0582 |
| Red Hat OpenShift 4 | tini | 0.16.1-1.el7ar | RHBA-2020:0582 |
| Red Hat OpenShift 4 | toolbox | 0.0.7-1.rhaos4.4.el8 | RHBA-2020:0582 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | cockpit-podman | 11-1.module_el8.5.0+108+00865455 | ALSA-2020:1931 |
| AlmaLinux 8 | container-selinux | 2:2.124.0-1.gitf958d0c.module_el8.3.0+2044+12421f43 | ALSA-2020:1926 |
| AlmaLinux 8 | containernetworking-plugins | 0.8.3-4.module_el8.5.0+108+00865455 | ALSA-2020:1931 |
| AlmaLinux 8 | crit +2 | 3.12-9.module_el8.3.0+2044+12421f43 | ALSA-2020:1932, ALSA-2020:1931, ALSA-2020:1926 |
| AlmaLinux 8 | fuse-overlayfs | 0.3-5.module_el8.3.0+2044+12421f43 | ALSA-2020:1926 |
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43 | ALSA-2020:1926 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43 | ALSA-2020:1926 |
| AlmaLinux 8 | python-podman-api | 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455 | ALSA-2020:1932, ALSA-2020:1931 |
| AlmaLinux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module_el8.3.0+2044+12421f43 | ALSA-2020:1926 |
| AlmaLinux 8 | slirp4netns | 0.1-5.dev.gitc4e1bc5.module_el8.3.0+2044+12421f43 | ALSA-2020:1932, ALSA-2020:1931, ALSA-2020:1926 |
| AlmaLinux 8 | toolbox | 0.0.7-1.module_el8.5.0+108+00865455 | ALSA-2020:1932, ALSA-2020:1931 |
| AlmaLinux 8 | udica | 0.2.1-2.module_el8.5.0+108+00865455 | ALSA-2020:1932, ALSA-2020:1931 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | buildah | 1.11.6-8.module+el8.4.0+559+c02fa3b2 | RLSA-2020:1932 |
| Rocky Linux 8 | cockpit-podman | 11-1.module+el8.4.0+559+c02fa3b2 | RLSA-2020:1931 |
| Rocky Linux 8 | container-selinux | 2:2.124.0-1.gitf958d0c.module+el8.4.0+557+48ba8b2f | RLSA-2020:1932, RLSA-2020:1931, RLSA-2020:1926 |
| Rocky Linux 8 | containernetworking-plugins | 0.8.3-4.module+el8.4.0+559+c02fa3b2 | RLSA-2020:1931 |
| Rocky Linux 8 | criu | 3.12-9.module+el8.4.0+557+48ba8b2f | RLSA-2020:1932, RLSA-2020:1931, RLSA-2020:1926 |
| Rocky Linux 8 | fuse-overlayfs | 0.3-5.module+el8.4.0+557+48ba8b2f | RLSA-2020:1926 |
| Rocky Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f | RLSA-2020:1926 |
| Rocky Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f | RLSA-2020:1926 |
| Rocky Linux 8 | python-podman-api | 1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2 | RLSA-2020:1932, RLSA-2020:1931 |
| Rocky Linux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f | RLSA-2020:1932, RLSA-2020:1926 |
| Rocky Linux 8 | slirp4netns | 0.1-5.dev.gitc4e1bc5.module+el8.4.0+535+5beadeea | RLSA-2020:1932, RLSA-2020:1931, RLSA-2020:1926 |
| Rocky Linux 8 | toolbox | 0.0.7-1.module+el8.4.0+559+c02fa3b2 | RLSA-2020:1932, RLSA-2020:1931 |
| Rocky Linux 8 | udica | 0.2.1-2.module+el8.4.0+559+c02fa3b2 | RLSA-2020:1932, RLSA-2020:1931 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | buildah | 1.27.1-150400.3.8.1 | SUSE-SU-2022:4349-1, SUSE-SU-2022:3655-1 |
| SLES 15 SP3 | buildah | 1.23.1-150300.8.3.1 | SUSE-SU-2022:4350-1, SUSE-SU-2022:3766-1, SUSE-SU-2022:0770-1 |
| SLES 15 SP3 | libgpg-error | 1.42-150300.9.3.1 | SUSE-SU-2022:3766-1 |
| SLES 15 SP2 | buildah | 1.17.0-3.6.1 | SUSE-SU-2022:3480-1, SUSE-SU-2020:3423-1 |
| SLES 15 SP1 | buildah | 1.17.0-3.6.1 | SUSE-SU-2022:3480-1, SUSE-SU-2020:3423-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP2 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SLES for SAP 15 SP1 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SLE Micro 5.2 | libgpg-error | 1.42-150300.9.3.1 | SUSE-SU-2022:3766-1 |
| SLE Micro 5.1 | libgpg-error | 1.42-150300.9.3.1 | SUSE-SU-2022:3766-1 |
| SLE HPC 15 SP2 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SLE HPC 15 SP1 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SUSE Manager Server 4.1 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SUSE Manager Retail Branch Server 4.1 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SUSE Manager Proxy 4.1 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SUSE Enterprise Storage 7 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
| SUSE Enterprise Storage 6 | buildah | 1.25.1-150100.3.13.12 | SUSE-SU-2022:3480-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | buildah | 1.23.0-1.1 | openSUSE-SU-2024:10666-1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20241213T205935-1.1 | openSUSE-SU-2024:14599-1 |
| openSUSE Leap 15.4 | buildah | 1.27.1-150400.3.8.1 | SUSE-SU-2022:4349-1, SUSE-SU-2022:3655-1 |
| openSUSE Leap 15.3 | buildah | 1.23.1-150300.8.3.1 | openSUSE-SU-2022:0770-1, SUSE-SU-2022:4350-1, SUSE-SU-2022:3766-1 |
| openSUSE Leap 15.3 | libgpg-error | 1.42-150300.9.3.1 | SUSE-SU-2022:3766-1 |
| openSUSE Leap 15.2 | buildah | 1.19.2-lp152.2.3.1 | openSUSE-SU-2021:0310-1 |
| openSUSE Leap 15.2 | libcontainers-common | 20210112-lp152.2.6.1 | openSUSE-SU-2021:0310-1 |
| openSUSE Leap 15.2 | podman | 2.2.1-lp152.4.9.1 | openSUSE-SU-2021:0310-1 |
| openSUSE Leap 15.1 | buildah | 1.17.0-lp151.2.6.1 | openSUSE-SU-2020:2106-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.2 | libgpg-error | 1.42-150300.9.3.1 | SUSE-SU-2022:3766-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | buildah | 1.14.4-r0 | — |
| Alpine v3.23 | buildah | 1.14.4-r0 | — |
| Alpine v3.22 | buildah | 1.14.4-r0 | — |
| Alpine v3.21 | buildah | 1.14.4-r0 | — |
| Alpine v3.20 | buildah | 1.14.4-r0 | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | buildah | 1.14.4-r0 | — |
| Alpine v3.18 | buildah | 1.14.4-r0 | — |
| Alpine v3.17 | buildah | 1.14.4-r0 | — |
| Alpine v3.16 | buildah | 1.14.4-r0 | — |
| Alpine v3.15 | buildah | 1.14.4-r0 | — |
| Alpine v3.14 | buildah | 1.14.4-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | buildah | 1.5-4.0.1.gite94b4f9.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | buildah-tests | 1.11.6-7.0.1.module+el8.2.0+7618+3a616245 | ELSA-2020-1932, ELSA-2020-1931 |
| Oracle Linux 8 | cockpit-podman | 11-1.module+el8.2.0+7618+3a616245 | ELSA-2020-1932, ELSA-2020-1931 |
| Oracle Linux 8 | conmon | 2:2.0.6-1.0.1.module+el8.2.0+7615+180dc822 | ELSA-2020-1932, ELSA-2020-1931 |
| Oracle Linux 8 | container-selinux | 2:2.124.0-1.gitf958d0c.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | containernetworking-plugins | 0.7.4-3.git9ebe139.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | crit +2 | 3.12-9.module+el8.2.0+7615+180dc822 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | fuse-overlayfs | 0.3-5.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1926 |
| Oracle Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1926 |
| Oracle Linux 8 | podman +1 | 1.0.0-4.git921f98f.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | podman-tests +1 | 1.6.4-11.0.1.module+el8.2.0+7615+180dc822 | ELSA-2020-1932, ELSA-2020-1931 |
| Oracle Linux 8 | python-podman-api | 1.2.0-0.2.gitd0a45fe.module+el8.2.0+7615+180dc822 | ELSA-2020-1932, ELSA-2020-1931 |
| Oracle Linux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | skopeo +1 | 1:0.1.32-4.0.2.git1715c90.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | skopeo-tests | 1:0.1.40-9.0.1.module+el8.2.0+7618+3a616245 | ELSA-2020-1932, ELSA-2020-1931 |
| Oracle Linux 8 | slirp4netns | 0.1-5.dev.gitc4e1bc5.module+el8.2.0+7621+b33f33e5 | ELSA-2020-1932, ELSA-2020-1931, ELSA-2020-1926 |
| Oracle Linux 8 | udica | 0.2.1-2.module+el8.2.0+7615+180dc822 | ELSA-2020-1932, ELSA-2020-1931 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/containers/buildah | < 1.14.4 | 1.14.4 | GHSA-fx8w-mjvm-hvpc |
Advisories 30
- ALSA-2020:1926 Important: container-tools:1.0 security and bug fix update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2020:1932 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2020:1931 Important: container-tools:2.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHBA-2020:0582 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4 RPM release advisory Red Hat Security Advisories (RHSA) · Oct 18, 2026
- RHSA-2020:2117 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:1932 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:2116 Red Hat Security Advisory: buildah security and bug fix update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:1926 Red Hat Security Advisory: container-tools:1.0 security and bug fix update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:1931 Red Hat Security Advisory: container-tools:2.0 security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:1401 Red Hat Security Advisory: OpenShift Container Platform 4.2.28 security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:1449 Red Hat Security Advisory: OpenShift Container Platform 4.1.41 security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2020:1396 Red Hat Security Advisory: OpenShift Container Platform 4.3.12 podman security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RLSA-2020:1926 Important: container-tools:1.0 security and bug fix update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2020:1932 Important: container-tools:rhel8 security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2020:1931 Important: container-tools:2.0 security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2020:2106-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:3423-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3766-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:0310-1 Security update for buildah, libcontainers-common, podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3480-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10666-1 buildah-1.23.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0770-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:0770-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3655-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:4349-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:4350-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14599-1 govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2020-1926 Important: container-tools:1.0 security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 13, 2020
- ELSA-2020-1931 Important: container-tools:2.0 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 12, 2020
- ELSA-2020-1932 Important: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 12, 2020