Skip to content
OpenAdvisories
Medium ELSA-2024-6189 1 CVE

Moderate: buildah security update (Oracle Linux 9)

Published Sep 3, 2024 · Updated Sep 3, 2024

Ecosystem: Oracle Linux

Summary

[1.33.7-4.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.33.7-4]
- rebuild for CVE-2024-24783
- Resolves: RHEL-28428

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 buildah 2:1.33.7-4.0.1.el9_4
Oracle Linux · 9 buildah-tests 2:1.33.7-4.0.1.el9_4

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-24783

    Verify panics on certificates with an unknown public key algorithm in crypto/x509

    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go