Evidence · DiggingBeagle record
GitHub Advisory GHSA-xvhg-75x6-gj86, Beta9 build worker isolation
GHSA-xvhg-75x6-gj86 describes Beta9 tenant image build steps running as commands in a privileged Buildah worker with chroot isolation, with a proof of access to worker-level files or namespaces.
- Source role
- primary disclosure
Evidence record
GHSA-xvhg-75x6-gj86 describes Beta9 tenant image build steps running as commands in a privileged Buildah worker with chroot isolation, with a proof of access to worker-level files or namespaces.
Claim-level citations (1)
- supportsBeta9 image build chroot could expose a privileged worker namespace to tenant code: GHSA-xvhg-75x6-gj86 describes Beta9 tenant image build steps running as commands in a privileged Buildah worker with chroot isolation, with a proof of access to worker-level files or namespaces.
Advisory, affected image build process and privileged chroot proof