blob: 112d6ba29eb2b6d8ae93e5dbffde3dd17dec9d6e [file] [log] [blame]
id: GO-2022-0345
modules:
- module: github.com/containers/buildah
versions:
- fixed: 1.22.0
vulnerable_at: 1.21.0
packages:
- package: github.com/containers/buildah/chroot
symbols:
- RunUsingChroot
summary: Environment variable leakage in github.com/containers/buildah
description: |-
The RunUsingChroot function unintentionally propagates environment variables
from the current process to the child process.
published: 2022-07-15T23:30:21Z
cves:
- CVE-2021-3602
ghsas:
- GHSA-7638-r9r3-rmjj
references:
- fix: https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0
review_status: REVIEWED