[SUSE-SU-2022:4350-1] Security update for buildah
Severity
Important
Affected Packages
4
CVEs
2
Security update for buildah
This update for buildah fixes the following issues:
Version update to 1.28.2.
- CVE-2022-2990: Fixed a possible information disclosure and modification vulnerability (bsc#1202812).
- CVE-2020-10696: Fixed an issue with a crafted input tar file that may lead to a local file overwriting during image build process (bsc#1167864).
| Package | Affected Version |
|---|---|
 pkg:rpm/suse/buildah?arch=x86_64&distro=opensuse-leap-15.3
|
< 1.28.2-150300.8.14.1 |
|
pkg:rpm/suse/buildah?arch=s390x&distro=opensuse-leap-15.3
|
< 1.28.2-150300.8.14.1 |
|
pkg:rpm/suse/buildah?arch=ppc64le&distro=opensuse-leap-15.3
|
< 1.28.2-150300.8.14.1 |
|
pkg:rpm/suse/buildah?arch=aarch64&distro=opensuse-leap-15.3
|
< 1.28.2-150300.8.14.1 |
- ID
- SUSE-SU-2022:4350-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2022/suse-su-20224350-1/
- Published
-
2022-12-07T15:16:30
(21 months ago) - Modified
-
2022-12-07T15:16:30
(21 months ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
-
ALPINE:CVE-2020-10696
-
ALPINE:CVE-2022-2990
-
ALSA-2020:1926
-
ALSA-2020:1931
-
ALSA-2020:1932
-
ALSA-2022:7822
-
ALSA-2022:8008
-
ALSA-2022:8431
-
ELSA-2020-1926
-
ELSA-2020-1931
-
ELSA-2020-1932
-
ELSA-2022-7457
-
ELSA-2022-7822
-
ELSA-2022-8008
-
ELSA-2022-8431
-
GO-2022-1008
-
openSUSE-SU-2020:2106-1
-
openSUSE-SU-2021:0310-1
-
openSUSE-SU-2022:0770-1
-
RHSA-2020:1926
-
RHSA-2020:1931
-
RHSA-2020:1932
-
RHSA-2022:7457
-
RHSA-2022:7822
-
RHSA-2022:8008
-
RHSA-2022:8431
-
RLSA-2020:1926
-
RLSA-2020:1931
-
RLSA-2020:1932
-
RLSA-2022:7457
-
RLSA-2022:7822
-
SUSE-SU-2020:3423-1
-
SUSE-SU-2022:0770-1
-
SUSE-SU-2022:3480-1
-
SUSE-SU-2022:3655-1
-
SUSE-SU-2022:3766-1
-
SUSE-SU-2022:4349-1
-
SUSE-SU-2023:4099-1
-
| Source | # ID | Name | URL |
|---|---|---|---|
| Suse | SUSE ratings |
|
|
| Suse | URL of this CSAF notice |
|
|
| Suse | URL for SUSE-SU-2022:4350-1 |
|
|
| Suse | E-Mail link for SUSE-SU-2022:4350-1 |
|
|
| Bugzilla | SUSE Bug 1167864 |
|
|
| Bugzilla | SUSE Bug 1202812 |
|
|
| CVE | SUSE CVE CVE-2020-10696 page |
|
|
| CVE | SUSE CVE CVE-2022-2990 page |
|
| Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
|---|---|---|---|---|---|---|---|
| Affected | pkg:rpm/suse/buildah?arch=x86_64&distro=opensuse-leap-15.3 | suse |
buildah
|
< 1.28.2-150300.8.14.1 | opensuse-leap-15.3 | x86_64 | |
| Affected | pkg:rpm/suse/buildah?arch=s390x&distro=opensuse-leap-15.3 | suse |
buildah
|
< 1.28.2-150300.8.14.1 | opensuse-leap-15.3 | s390x | |
| Affected | pkg:rpm/suse/buildah?arch=ppc64le&distro=opensuse-leap-15.3 | suse |
buildah
|
< 1.28.2-150300.8.14.1 | opensuse-leap-15.3 | ppc64le | |
| Affected | pkg:rpm/suse/buildah?arch=aarch64&distro=opensuse-leap-15.3 | suse |
buildah
|
< 1.28.2-150300.8.14.1 | opensuse-leap-15.3 | aarch64 |
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |