Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | buildah | 2:1.33.11-1.el9_4 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | buildah-debuginfo | 2:1.33.11-1.el9_4 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | buildah-debugsource | 2:1.33.11-1.el9_4 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | buildah-tests | 2:1.33.11-1.el9_4 |
| Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream | buildah-tests-debuginfo | 2:1.33.11-1.el9_4 |
Vulnerabilities 2
-
Medium 6.5
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an au…
-
Medium 4.7
Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction
A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exp…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2315887
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2317467
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9926.json
-
report
https://access.redhat.com/security/cve/CVE-2024-9407
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-9407
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-9407
-
advisory
https://github.com/advisories/GHSA-fhqq-8f65-5xfc
-
report
https://access.redhat.com/security/cve/CVE-2024-9676
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-9676
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-9676
-
advisory
https://github.com/advisories/GHSA-wq2p-5pc6-wpgf
-
article
https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679