SUSE-SU-2023:4099-1

Details

This update for buildah fixes the following issues:

CVE-2022-2990: Fixed a flaw which might allow sensitive information disclosure or possible data modification. (bsc#1202812)
buildah is also rebuilt against go1.21.

Affected Packages

buildah

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP2-LTSS

Fixed in:

1.25.1-150100.3.20.15

References

REPORT

https://bugzilla.suse.com/1202812

REPORT

https://bugzilla.suse.com/1216005

WEB

https://www.suse.com/security/cve/CVE-2022-2990

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20234099-1/