CVE-2021-3602
2 advisories.
Go/github.com/containers/buildah CVE-2021-3602: medium 5.5, EPSS 0.33%
Buildah processes using chroot isolation may leak environment values to intermediate processes
Action: Upgrade github.com/containers/buildah to 1.16.8 or later.
go get github.com/containers/buildah@v1.16.8go get github.com/containers/buildah@v1.17.2go get github.com/containers/buildah@v1.19.9go get github.com/containers/buildah@v1.21.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.8 | - |
| 1.17.0 | 1.17.2 | - |
| 1.18.0 | 1.19.9 | - |
| 1.20.0 | 1.21.3 | - |
Fixed versions
| 1.16.8 | 1.17.2 | 1.19.9 | 1.21.3 |
Sources
- osv: GHSA-7638-r9r3-rmjj
- https://github.com/containers/buildah/security/advisories/GHSA-7638-r9r3-rmjj
- https://nvd.nist.gov/vuln/detail/CVE-2021-3602
- https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0
- https://bugzilla.redhat.com/show_bug.cgi?id=1969264
- https://github.com/containers/buildah
- https://pkg.go.dev/vuln/GO-2022-0345
- https://ubuntu.com/security/CVE-2021-3602
CVE-2021-3602 · published · modified · JSON
Go/github.com/containers/buildah CVE-2021-3602: unknown, EPSS 0.33%
Environment variable leakage in github.com/containers/buildah
Action: Upgrade github.com/containers/buildah to 1.22.0 or later.
go get github.com/containers/buildah@v1.22.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.22.0 | - |
Fixed versions
| 1.22.0 |
Sources
- osv: GO-2022-0345
- https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0
CVE-2021-3602 · published · modified · JSON