CVE-2024-23652

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.

Impact

A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.

Patches

The issue has been fixed in v0.12.5

Workarounds

Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.

References

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.

A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system.

These are all security issues fixed in the buildkit-0.12.5-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the docker-24.0.7_ce-3.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the docker-stable-24.0.9_ce-15.1 package on the GA media of openSUSE Tumbleweed.

This update for docker fixes the following issues:

Vendor latest buildkit v0.11 including bugfixes for the following:

• CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438).
• CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).
• CVE-2024-23651: Fixed race condition in mount (bsc#1219267).

This update for docker fixes the following issues:

Vendor latest buildkit v0.11 including bugfixes for the following:

• CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438).
• CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).
• CVE-2024-23651: Fixed race condition in mount (bsc#1219267).

This update for docker fixes the following issues:

Vendor latest buildkit v0.11 including bugfixes for the following:

• CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438).
• CVE-2024-23652: Fixed arbitrary deletion of files (bsc#1219268).
• CVE-2024-23651: Fixed race condition in mount (bsc#1219267).

This update for docker fixes the following issues:

• CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)
• CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)
• CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)

Other fixes:

• Update to Docker 25.0.5-ce (bsc#1223409)

This update for buildah, docker fixes the following issues:

Changes in docker:

• CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)
• CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)
• CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)
• CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)

Other fixes:

• Update to Docker 25.0.6-ce. See upstream changelog online at https://docs.docker.com/engine/release-notes/25.0/#2506

• Update to Docker 25.0.5-ce (bsc#1223409)

• Fix BuildKit's symlink resolution logic to correctly handle non-lexical symlinks. (bsc#1221916)

• Write volume options atomically so sudden system crashes won't result in future Docker starts failing due to empty files. (bsc#1214855)

Changes in buildah:

• Update to version 1.35.4:

  • [release-1.35] Bump to Buildah v1.35.4
  • [release-1.35] CVE-2024-3727 updates (bsc#1224117)
  • integration test: handle new labels in 'bud and test --unsetlabel'
  • [release-1.35] Bump go-jose CVE-2024-28180
  • [release-1.35] Bump ocicrypt and go-jose CVE-2024-28180

• Update to version 1.35.3:

  • [release-1.35] Bump to Buildah v1.35.3
  • [release-1.35] correctly configure /etc/hosts and resolv.conf
  • [release-1.35] buildah: refactor resolv/hosts setup.
  • [release-1.35] rename the hostFile var to reflect
  • [release-1.35] Bump c/common to v0.58.1
  • [release-1.35] Bump Buildah to v1.35.2
  • [release-1.35] CVE-2024-24786 protobuf to 1.33
  • [release-1.35] Bump to v1.35.2-dev

• Update to version 1.35.1:

  • [release-1.35] Bump to v1.35.1
  • [release-1.35] CVE-2024-1753 container escape fix (bsc#1221677)

• Buildah dropped cni support, require netavark instead (bsc#1221243)

• Remove obsolete requires libcontainers-image & libcontainers-storage

• Require passt for rootless networking (poo#156955) Buildah moved to passt/pasta for rootless networking from slirp4netns (https://github.com/containers/common/pull/1846)

• Update to version 1.35.0:

  • Bump v1.35.0
  • Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
  • conformance tests: don't break on trailing zeroes in layer blobs
  • Add a conformance test for copying to a mounted prior stage
  • fix(deps): update module github.com/stretchr/testify to v1.9.0
  • cgroups: reuse version check from c/common
  • Update vendor of containers/(common,image)
  • fix(deps): update github.com/containers/storage digest to eadc620
  • fix(deps): update github.com/containers/luksy digest to ceb12d4
  • fix(deps): update github.com/containers/image/v5 digest to cdc6802
  • manifest add: complain if we get artifact flags without --artifact
  • Use retry logic from containers/common
  • Vendor in containers/(storage,image,common)
  • Update module golang.org/x/crypto to v0.20.0
  • Add comment re: Total Success task name
  • tests: skip_if_no_unshare(): check for --setuid
  • Properly handle build --pull=false
  • [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
  • Update module go.etcd.io/bbolt to v1.3.9
  • Revert 'Reduce official image size'
  • Update module github.com/opencontainers/image-spec to v1.1.0
  • Reduce official image size
  • Build with CNI support on FreeBSD
  • build --all-platforms: skip some base 'image' platforms
  • Bump main to v1.35.0-dev
  • Vendor in latest containers/(storage,image,common)
  • Split up error messages for missing --sbom related flags
  • buildah manifest: add artifact-related options
  • cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
  • cmd/buildah/manifest.go: don't make struct declarations aliases
  • Use golang.org/x/exp/slices.Contains
  • Disable loong64 again
  • Fix a couple of typos in one-line comments
  • egrep is obsolescent; use grep -E
  • Try Cirrus with a newer VM version
  • Set CONTAINERS_CONF in the chroot-mount-flags…

This update for docker-stable fixes the following issues:

• Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand how the package is forked and so it seems that this package does not include fixes for ~12 years of updates. So, include a copy of the original package's changelog up until the fork point. (bsc#1250596)

• Remove git-core recommends on SLE. Most SLE systems have installRecommends=yes by default and thus end up installing git with Docker. bsc#1250508

  This feature is mostly intended for developers ('docker build git://') so most users already have the dependency installed, and the error when git is missing is fairly straightforward (so they can easily figure out what they need to install).

• Backport https://github.com/moby/moby/pull/48517. bsc#1247362

• Update to docker-buildx v0.25.0. Upstream changelog: https://github.com/docker/buildx/releases/tag/v0.25.0

• Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150

• Initial docker-stable fork, forked from Docker 24.0.7-ce release (packaged on 2024-02-14). The original changelog is included below for historical reference.

This update for docker-stable fixes the following issues:

Note this update contains a already fixed references mostly.

• Remove git-core recommends on SLE to avoid pulling it in unnecessary. (bsc#1250508)

  This feature is mostly intended for developers ('docker build git://') so most users already have the dependency installed, and the error when git is missing is fairly straightforward (so they can easily figure out what they need to install).

• Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand how the package is forked and so it seems that this package does not include fixes for ~12 years of updates. So, include a copy of the original package's changelog up until the fork point. bsc#1250596

• Update to docker-buildx v0.25.0. Upstream changelog: https://github.com/docker/buildx/releases/tag/v0.25.0

• Update to Go 1.23 for building now that upstream has switched their 23.0.x LTSS to use Go 1.23.

• Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as Docker does not have permission to access the host zypper credentials in this mode (and unprivileged users cannot disable the feature using /etc/docker/suse-secrets-enable.) bsc#1240150

• Initial docker-stable fork, forked from Docker 24.0.7-ce release (packaged on 2024-02-14). The original changelog is included below for historical reference.

This update for docker fixes the following issues:

Security fixes:

• CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)
• CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)
• CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)
• CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)

Other changes:

• Update to Docker 25.0.6-ce.
• Fix BuildKit's symlink resolution logic to correctly handle non-lexical symlinks. (bsc#1221916)
• Write volume options atomically so sudden system crashes won't result in future Docker starts failing due to empty files. (bsc#1214855)
• Fixed world writable docker overlay files (bsc#1220339)

This update for buildkit fixes the following issues:

• Update to version 0.12.5:

  • update runc to v1.1.12
  • exec: add extra validation for submount sources (fixes CVE-2024-23651, bsc#1219267)
  • oci: fix error handling on submount calls
  • executor: recheck mount stub path within root after container run (fixes CVE-2024-23652, bsc#1219268)
  • llbsolver: make sure interactive container API validates entitlements (fixes CVE-2024-23653, bsc#1219438)
  • gateway: pass executor with build and not access worker directly
  • pb: add extra validation to protobuf types
  • sourcepolicy: add validations for nil values
  • exporter: add validation for platforms key value
  • exporter: add validation for invalid platorm
  • exporter: validate null config metadata from gateway
  • ci: disable push if not upstream repo
  • hack: use git context only for upstream repo
  • hack/test: allow ALPINE_VERSION to be set from env
  • hack: align syntax
  • vendor: github.com/cyphar/filepath-securejoin v0.2.4
  • tracing: allow the Resource to be set externally

• Update to version 0.12.4:

  • Fix possible concurrent map access on remote cache export
  • Fix hang on debug server listener
  • Fix possible deadlock in History API under high number of parallel builds
  • Fix possible panic on handling deleted records in History API
  • Fix possible data corruption in zstd library

• Update to version 0.12.3:

  • Fix possible duplicate source files in provenance attestation for chained builds
  • Fix possible negative step time in progressbar for step shared with other build request
  • Fix properly closing history and cache DB on shutdown to avoid corruption
  • Fix incorrect error handling for invalid HTTP source URLs
  • Fix fallback cases for ambiguous insecure configuration provided for registry used as push target.
  • Fix possible data race with parallel image config resolves
  • Fix regression in v0.12 for clients waiting on buildkitd to become available
  • Fix Cgroup NS handling for hosts supporting only CgroupV1

• Update to version 0.12.2:

  • Fix possible discarded network error when exporting result to client
  • Avoid unnecessary memory allocations when writing build progress

• Update to version 0.12.1:

  • executor: fix resource sampler goroutine leak
  • [v0.11] make tracing socket forward error non-fatal
  • integration: missing env var to check feature compat
  • test: update pinned busybox image to 1.36
  • test: update pinned alpine image to 3.18
  • vendor: github.com/docker/docker 8e51b8b59cb8 (master, v25.0.0-dev)
  • executor/resource: stub out NewSysSampler on Windows
  • vendor: github.com/docker/cli v24.0.4
  • testutil: move CheckContainerdVersion to a separate package
  • llbsolver: fix policy rule ordering
  • filesync: fix backward compatibility with encoding + and %
  • hack: allow to set GO_VERSION during tests
  • test: always disable tls for dockerd worker
  • buildctl: set max backoff delay to 1 second
  • contenthash: data race
  • filesync: escape special query characters
  • applier: add hack to support docker zstd layers
  • Fix various nits
  • pullprogress data race
  • use sampler lock instead
  • Fix ResolveImageConfig to evaluate source policy
  • sampler data race fix
  • update cgroup parent test to work with cgroupns
  • Revert "specify a ResponseHeaderTimeout value"
  • oci: make sure cgroupns is enabled if supported
  • bash lint fix
  • rename BUILDFLAGS to GOBUILDFLAGS
  • allow ENOTSUP for PSI cgroup files
  • containerimage: use platform matcher to detect platform to unpack
  • exporter: silently skip unpacking unknown reference
  • improve error handling in ReadFile
  • dockerfile: arg for controlling go build flags
  • dockerfile: arg to enable go race detection
  • Add support for health start interval
  • Re-vendor moby/moby
  • filesync: mark if options have been encoded to detect old versions
  • dockerfile: heredoc should use 0644 permissions
  • docs: update README to reference…

Cory Snider discovered that Docker incorrectly handled networking packet encapsulation. An attacker could use this issue to inject internet packets in established connection, possibly causing a denial of service or bypassing firewall protections. This issue only affected Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. (CVE-2023-28840, CVE-2023-28841, CVE-2023-28842)

Rory McNamara discovered that Docker incorrectly handled cache in the BuildKit toolkit. An attacker could possibly use this issue to expose sensitive information. (CVE-2024-23651)

It was discovered that Docker incorrectly handled parallel operations in some circumstances, which could possibly lead to undefined behavior. (CVE-2024-36621, CVE-2024-36623)

Rory McNamara discovered that Docker incorrectly verified file paths during a certain command in the BuildKit toolkit. An attacker could possibly use this issue to delete arbitrary files from the system. (CVE-2024-23652)