packages:
  - module: github.com/containers/buildah
    package: github.com/containers/buildah/chroot
    symbols:
      - RunUsingChroot
    versions:
      - fixed: 1.22.0
    vulnerable_at: 1.21.0
description: |
    The RunUsingChroot function unintentionally propagates environment
    variables from the current process to the child process.
cves:
  - CVE-2021-3602
ghsas:
  - GHSA-7638-r9r3-rmjj
links:
    commit: https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0