blob: e780292c3225a821175494aa00d632a3793efc52 [file] [log] [blame]
packages:
- module: github.com/containers/buildah
package: github.com/containers/buildah/chroot
symbols:
- RunUsingChroot
versions:
- fixed: 1.22.0
vulnerable_at: 1.21.0
description: |
The RunUsingChroot function unintentionally propagates environment
variables from the current process to the child process.
cves:
- CVE-2021-3602
ghsas:
- GHSA-7638-r9r3-rmjj
links:
commit: https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0