Lucene search

K
osvGoogleOSV:RLSA-2022:1565
HistoryApr 26, 2022 - 1:51 p.m.

Moderate: container-tools:3.0 security and bug fix update

2022-04-2613:51:39
Google
osv.dev
4

0.002 Low

EPSS

Percentile

64.8%

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649)

  • buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • 3.0 stable stream: podman run --pid=host command causes OCI permission error (BZ#2070961)