Description
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
Affected Platforms
Redhat Enterprise Linux For Arm 64 EusRedhat Enterprise Linux For Arm 64Redhat Enterprise Linux Server TusRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux For Power Little EndianRedhat Enterprise Linux Update Services For Sap SolutionsRedhat Openshift Container PlatformBuildah Project BuildahRedhat Enterprise Linux For Ibm Z Systems Eus