tocsin

Alpine/buildah: medium 4.7

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary

Action: Upgrade buildah to 1.37.4-r0 or later.

Affected

introducedfixedlast affected
01.37.4-r0-

Fixed versions

1.37.4-r0

Sources

published · modified · JSON