CVE:CVE-2022-27650
CNNVD:CNNVD-202203-2644
Buildah是一款支持构建OCI容器映像的工具。
Buildah 存在安全漏洞，该漏洞源于受影响产品使用非空默认权限错误地启动了容器。
solution:Upgrade crun_project crun to a higher version than 1.4.4,and avoid the version (,1.4.4); Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade redhat openshift_container_platform to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0