Bugzilla – Bug 1167864
VUL-0: CVE-2020-10696: buildah: crafted input tar file may lead to local file overwriting during image build process
Last modified: 2022-12-07 20:20:41 UTC
rh#1817651 During buildah image building process a crafted tar file containing symlinks may lead buildah to overwrite any file which the running uid have write permissions, compromising confidentiality, integrity and possibly allowing code execution. References: https://bugzilla.redhat.com/show_bug.cgi?id=1817651 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-10696
patch: https://github.com/containers/buildah/commit/c61925b8936e93a5e900f91b653a846f7ea3a9ed
judging by the patch I believe SUSE:SLE-15-SP1:Update is partially affected.
SUSE-SU-2020:3423-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1165184,1167864 CVE References: CVE-2019-10214,CVE-2020-10696 JIRA References: Sources used: SUSE Linux Enterprise Module for Containers 15-SP2 (src): buildah-1.17.0-3.6.1 SUSE Linux Enterprise Module for Containers 15-SP1 (src): buildah-1.17.0-3.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2020:2106-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1165184,1167864 CVE References: CVE-2019-10214,CVE-2020-10696 JIRA References: Sources used: openSUSE Leap 15.1 (src): buildah-1.17.0-lp151.2.6.1
SUSE-SU-2022:3480-1: An update that solves three vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1167864,1181961,1183043,1192999,1197870 CVE References: CVE-2020-10696,CVE-2021-20206,CVE-2022-27651 JIRA References: Sources used: SUSE Manager Server 4.1 (src): buildah-1.25.1-150100.3.13.12 SUSE Manager Retail Branch Server 4.1 (src): buildah-1.25.1-150100.3.13.12 SUSE Manager Proxy 4.1 (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise Server for SAP 15-SP2 (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise Server for SAP 15-SP1 (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise Server 15-SP2-LTSS (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise Server 15-SP2-BCL (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise Server 15-SP1-LTSS (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise Server 15-SP1-BCL (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): buildah-1.25.1-150100.3.13.12 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): buildah-1.25.1-150100.3.13.12 SUSE Enterprise Storage 7 (src): buildah-1.25.1-150100.3.13.12 SUSE Enterprise Storage 6 (src): buildah-1.25.1-150100.3.13.12 SUSE CaaS Platform 4.0 (src): buildah-1.25.1-150100.3.13.12 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:3655-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1167864,1181961,1202812 CVE References: CVE-2020-10696,CVE-2021-20206,CVE-2022-2990 JIRA References: Sources used: openSUSE Leap 15.4 (src): buildah-1.27.1-150400.3.8.1 SUSE Linux Enterprise Module for Containers 15-SP4 (src): buildah-1.27.1-150400.3.8.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:3766-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1167864,1181961,1202812 CVE References: CVE-2020-10696,CVE-2021-20206,CVE-2022-2990 JIRA References: Sources used: openSUSE Leap Micro 5.2 (src): libgpg-error-1.42-150300.9.3.1 openSUSE Leap 15.3 (src): buildah-1.27.1-150300.8.11.1, libgpg-error-1.42-150300.9.3.1 SUSE Linux Enterprise Module for Containers 15-SP3 (src): buildah-1.27.1-150300.8.11.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): libgpg-error-1.42-150300.9.3.1 SUSE Linux Enterprise Micro 5.2 (src): libgpg-error-1.42-150300.9.3.1 SUSE Linux Enterprise Micro 5.1 (src): libgpg-error-1.42-150300.9.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:4349-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1167864,1202812 CVE References: CVE-2020-10696,CVE-2022-2990 JIRA References: Sources used: openSUSE Leap 15.4 (src): buildah-1.28.2-150400.3.11.1 SUSE Linux Enterprise Module for Containers 15-SP4 (src): buildah-1.28.2-150400.3.11.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:4350-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1167864,1202812 CVE References: CVE-2020-10696,CVE-2022-2990 JIRA References: Sources used: openSUSE Leap 15.3 (src): buildah-1.28.2-150300.8.14.1 SUSE Linux Enterprise Module for Containers 15-SP3 (src): buildah-1.28.2-150300.8.14.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.