Alpine/podman: medium 6.3
Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded
Action: Upgrade podman to 5.8.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.8.3-r0 | - |
Fixed versions
| 5.8.3-r0 |
Sources
published · modified · JSON