Nixpkgs security tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: buildah-unwrapped

Found 4 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2025-11395
5.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Adjacent (A)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Adjacent (A)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): Low (L)
created 2 days, 2 hours ago Activity log
  • Created suggestion 2 days, 2 hours ago
Podman: arbitrary file write when importing oci archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

References

Affected products

rhcos
podman
skopeo
buildah
devspaces/udi-rhel9
devspaces/udi-base-rhel9
container-tools:rhel8/podman

Matching in nixpkgs

pkgs.podman

Program for managing pods, containers and container images

pkgs.skopeo

Command line utility for various operations on container images and image repositories

pkgs.cockpit-podman

Cockpit UI for podman containers

  • nixos-unstable 128
    • nixpkgs-unstable 128
    • nixos-unstable-small 129
  • nixos-26.05 125
    • nixos-26.05-small 125
    • nixpkgs-26.05-darwin 125

Package maintainers

Untriaged
Permalink CVE-2026-79699
4.4 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): Low (L)
  • Availability (A): Low (L)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): Low (L)
created 2 days, 2 hours ago Activity log
  • Created suggestion 2 days, 2 hours ago
Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.

References

Affected products

podman
skopeo
buildah
rhel9/podman
rhel9/skopeo
python-podman
rhel9/buildah
python3x-podman
python3.11-podman
python3.12-podman
devspaces/udi-rhel9
quay/quay-builder-rhel8
quay/quay-builder-rhel9
devspaces/udi-base-rhel9
devspaces/udi-base-rhel10
ansible-automation-platform-24/eda-controller-rhel8
ansible-automation-platform-25/eda-controller-rhel8
ansible-automation-platform-26/eda-controller-rhel9
ansible-automation-platform-27/eda-controller-rhel9
container-native-virtualization/ocp-virt-validation-checkup-rhel9

Matching in nixpkgs

pkgs.podman

Program for managing pods, containers and container images

pkgs.skopeo

Command line utility for various operations on container images and image repositories

pkgs.cockpit-podman

Cockpit UI for podman containers

  • nixos-unstable 128
    • nixpkgs-unstable 128
    • nixos-unstable-small 129
  • nixos-26.05 125
    • nixos-26.05-small 125
    • nixpkgs-26.05-darwin 125

Package maintainers

Untriaged
Permalink CVE-2026-79705
4.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): High (H)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): None (N)
  • Integrity (I): High (H)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): High (H)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): None (N)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): None (N)
created 2 days, 2 hours ago Activity log
  • Created suggestion 2 days, 2 hours ago
Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not affected.

References

Affected products

podman
buildah
ubi8/podman
ubi9/podman
ubi10/podman
ubi8/buildah
ubi9/buildah
python-podman
ubi10/buildah
rhel10/buildah
python3x-podman
python3.11-podman
python3.12-podman
devspaces/udi-rhel9
quay/quay-builder-rhel8
quay/quay-builder-rhel9
devspaces/udi-base-rhel9
devspaces/udi-base-rhel10
openshift/ose-rhel-coreos-8
openshift/ose-rhel-coreos-9
container-tools:rhel8/podman
container-tools:rhel8/buildah
ansible-automation-platform-24/eda-controller-rhel8
ansible-automation-platform-25/eda-controller-rhel8
ansible-automation-platform-26/eda-controller-rhel9
ansible-automation-platform-27/eda-controller-rhel9
container-native-virtualization/ocp-virt-validation-checkup-rhel9

Matching in nixpkgs

pkgs.podman

Program for managing pods, containers and container images

pkgs.cockpit-podman

Cockpit UI for podman containers

  • nixos-unstable 128
    • nixpkgs-unstable 128
    • nixos-unstable-small 129
  • nixos-26.05 125
    • nixos-26.05-small 125
    • nixpkgs-26.05-darwin 125

Package maintainers

Untriaged
Permalink CVE-2026-44517
6.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 3 weeks, 6 days ago Activity log
  • Created suggestion 3 weeks, 6 days ago
Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive

Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git repository subdirectories to the downloaded build context, and downloadToDirectory and stdinToDirectory can follow a Dockerfile symlink left by a partially extracted tar archive. A malicious server supplying a Git repository or tar archive can cause files outside the build context directory to be included in the context or copied into the build. This issue is fixed in versions 1.43.2 and 1.44.0.

Affected products

buildah
  • ==>= 1.38.1, < 1.43.2

Matching in nixpkgs

Package maintainers