Description
A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories from the host into a container during the build process and, in some cases, modify the contents of those mounted files. Even if SELinux is used, this vulnerability can bypass its protection by allowing the source directory to be relabeled to give the container access to host files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | podman | < 5.2.4 | 5.2.4 |
| — | buildah | < 1.37.4 | 1.37.4 |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-github-containers-buildah | 1.37.4+ds1-1 | — |
| Debian 13 | golang-github-containers-buildah | 1.37.4+ds1-1 | — |
| Debian 12 | golang-github-containers-buildah | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | golang-github-containers-buildah | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | golang-github-containers-buildah | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 2:1.37.5-1.el9_5 | RHSA-2024:9459 |
| RHEL 9 | podman +4 | 4:4.9.4-16.el9_4 | RHSA-2024:9454, RHSA-2024:9051 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | buildah +1 | 2:1.33.10-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | podman +6 | 4:4.9.4-15.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | python-podman +1 | 4.9.0-2.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | runc | 1:1.1.12-5.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+22397+e3c95ba6 | RHSA-2024:8846 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | buildah +1 | 2:1.33.11-1.el9_4 | RHSA-2024:9926 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 2:1.37.5-1.el9_5 | ALSA-2024:9459 |
| AlmaLinux 9 | podman +4 | 4:4.9.4-16.el9_4 | ALSA-2024:9454, ALSA-2024:9051 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2024:8846 |
| AlmaLinux 8 | buildah +1 | 2:1.33.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2024:8846 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+3876+e55593a8 | ALSA-2024:8846 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2024:8846 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:8846 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2024:8846 |
| AlmaLinux 8 | crit +3 | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:8846 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-2.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:8846 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-15.module_el8.10.0+3909+6e1c1eb7 | ALSA-2024:8846 |
| AlmaLinux 8 | python3-criu | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2024:8846 |
| AlmaLinux 8 | python3-podman | 4.9.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:8846 |
| AlmaLinux 8 | runc | 1:1.1.12-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2024:8846 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 | ALSA-2024:8846 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | toolbox | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:8846 |
| AlmaLinux 8 | toolbox-tests | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:8846 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+3876+e55593a8 | ALSA-2024:8846 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | podman | 4:4.9.4-16.el9_4 | RLSA-2024:9051 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | buildah | 1.35.4-150500.3.13.1 | SUSE-SU-2024:3545-1 |
| SLES 15 SP6 | govulncheck-vulndb | 0.0.20241030T212825-150000.1.9.1 | SUSE-SU-2024:3911-1 |
| SLES 15 SP6 | podman | 4.9.5-150500.3.25.1 | SUSE-SU-2024:3741-1 |
| SLES 15 SP5 | buildah | 1.35.4-150500.3.13.1 | SUSE-SU-2024:3545-1 |
| SLES 15 SP5 | govulncheck-vulndb | 0.0.20241030T212825-150000.1.9.1 | SUSE-SU-2024:3911-1 |
| SLES 15 SP5 | podman | 4.9.5-150500.3.25.1 | SUSE-SU-2024:3741-1 |
| SLES 15 SP4 | buildah | 1.35.4-150400.3.33.1 | SUSE-SU-2025:0319-1, SUSE-SU-2024:3988-1 |
| SLES 15 SP4 | podman | 4.9.5-150400.4.35.1 | SUSE-SU-2025:0267-1 |
| SLES 15 SP3 | buildah | 1.35.4-150300.8.28.3 | SUSE-SU-2025:0320-1, SUSE-SU-2024:4303-1 |
| SLES 15 SP3 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | buildah | 1.35.4-150400.3.33.1 | SUSE-SU-2025:0319-1, SUSE-SU-2024:3988-1 |
| SLES for SAP 15 SP4 | podman | 4.9.5-150400.4.35.1 | SUSE-SU-2025:0267-1 |
| SLES for SAP 15 SP3 | buildah | 1.35.4-150300.8.28.3 | SUSE-SU-2025:0320-1, SUSE-SU-2024:4303-1 |
| SLES for SAP 15 SP3 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLE Micro 6.1 | podman | 5.2.5-slfo.1.1_1.1 | SUSE-SU-2025:20279-1 |
| SLE Micro 6.0 | podman | 4.9.5-2.1 | SUSE-SU-2025:20143-1, SUSE-SU-2025:20080-1 |
| SLE Micro 5.5 | podman | 4.9.5-150500.3.25.1 | SUSE-SU-2024:3741-1 |
| SLE Micro 5.4 | podman | 4.9.5-150400.4.35.1 | SUSE-SU-2025:0267-1 |
| SLE Micro 5.3 | podman | 4.9.5-150400.4.35.1 | SUSE-SU-2025:0267-1 |
| SLE Micro 5.2 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLE Micro 5.1 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLE HPC 15 SP4 | buildah | 1.35.4-150400.3.33.1 | SUSE-SU-2025:0319-1, SUSE-SU-2024:3988-1 |
| SLE HPC 15 SP4 | podman | 4.9.5-150400.4.35.1 | SUSE-SU-2025:0267-1 |
| SLE HPC 15 SP3 | buildah | 1.35.4-150300.8.28.3 | SUSE-SU-2025:0320-1, SUSE-SU-2024:4303-1 |
| SLE HPC 15 SP3 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SUSE Package Hub 12 | govulncheck-vulndb | 0.0.20241104T154416-5.1 | openSUSE-SU-2024:0350-1 |
| SUSE Enterprise Storage 7.1 | buildah | 1.35.4-150300.8.28.3 | SUSE-SU-2025:0320-1, SUSE-SU-2024:4303-1 |
| SUSE Enterprise Storage 7.1 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | buildah | 1.37.4-1.1 | openSUSE-SU-2024:14388-1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20241030T212825-1.1 | openSUSE-SU-2024:14447-1 |
| openSUSE Tumbleweed | podman | 5.2.4-1.1 | openSUSE-SU-2024:14390-1 |
| openSUSE Leap 15.6 | buildah | 1.35.4-150500.3.13.1 | SUSE-SU-2024:3545-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20241030T212825-150000.1.9.1 | SUSE-SU-2024:3911-1 |
| openSUSE Leap 15.6 | podman | 4.9.5-150500.3.25.1 | SUSE-SU-2024:3741-1 |
| openSUSE Leap 15.5 | buildah | 1.35.4-150500.3.13.1 | SUSE-SU-2024:3545-1 |
| openSUSE Leap 15.5 | govulncheck-vulndb | 0.0.20241030T212825-150000.1.9.1 | SUSE-SU-2024:3911-1 |
| openSUSE Leap 15.5 | podman | 4.9.5-150500.3.25.1 | SUSE-SU-2024:3741-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | podman | 4.9.5-150500.3.25.1 | SUSE-SU-2024:3741-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | buildah | 1.37.4-r0 | — |
| Alpine v3.24 | podman | 5.2.4-r0 | — |
| Alpine v3.23 | buildah | 1.37.4-r0 | — |
| Alpine v3.23 | podman | 5.2.4-r0 | — |
| Alpine v3.22 | buildah | 1.37.4-r0 | — |
| Alpine v3.22 | podman | 5.2.4-r0 | — |
| Alpine v3.21 | buildah | 1.37.4-r0 | — |
| Alpine v3.21 | podman | 5.2.4-r0 | — |
| Alpine v3.20 | buildah | 1.37.4-r0 | — |
| Alpine v3.20 | podman | 5.2.4-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | buildah | No fix yet | — |
| Azure Linux 3 | podman | 5.6.1-2 | — |
| Azure Linux 2 (CBL-Mariner) | podman | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 2:1.37.5-1.0.1.el9_5 | ELSA-2024-9459 |
| Oracle Linux 9 | podman +4 | 4:4.9.4-16.0.1.el9_4 | ELSA-2024-9454, ELSA-2024-9051 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-15.0.1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | python3-podman | 4.9.0-2.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | runc | 1:1.1.12-5.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90429+ee702c5c | ELSA-2024-8846 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | buildah | 1.39.0-r2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/containers/buildah | < 1.37.4 | 1.37.4 | GHSA-fhqq-8f65-5xfc |
| Go | github.com/containers/podman | < 5.2.4 | 5.2.4 | GHSA-fhqq-8f65-5xfc |
| Go | github.com/containers/podman | all versions | — | GO-2024-3169 |
| Go | github.com/containers/podman/v2 | < 5.2.4 | 5.2.4 | GHSA-fhqq-8f65-5xfc |
| Go | github.com/containers/podman/v2 | all versions | — | GO-2024-3169 |
| Go | github.com/containers/podman/v3 | < 5.2.4 | 5.2.4 | GHSA-fhqq-8f65-5xfc |
| Go | github.com/containers/podman/v3 | all versions | — | GO-2024-3169 |
| Go | github.com/containers/podman/v4 | < 5.2.4 | 5.2.4 | GHSA-fhqq-8f65-5xfc |
| Go | github.com/containers/podman/v4 | all versions | — | GO-2024-3169 |
| Go | github.com/containers/podman/v5 | < 5.2.4 | 5.2.4 | GHSA-fhqq-8f65-5xfc |
Advisories 30
- ALSA-2024:9454 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9459 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9051 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8846 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:9459 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:9454 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:9926 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:9051 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:8846 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- SUSE-SU-2025:20143-1 Security update for podman SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20080-1 Security update for podman SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20279-1 Security update for podman SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2024:3911-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Feb 5, 2026
- openSUSE-SU-2024:0350-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Feb 4, 2026
- RLSA-2024:9051 Important: podman security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2025:0319-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14390-1 podman-5.2.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14388-1 buildah-1.37.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3741-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4303-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0775-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14447-1 govulncheck-vulndb-0.0.20241030T212825-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3988-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0267-1 Security update for podman SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3545-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0320-1 Security update for buildah SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2024-9454 Important: podman security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 20, 2024
- ELSA-2024-9459 Important: buildah security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 20, 2024
- ELSA-2024-9051 Important: podman security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 11, 2024
- ELSA-2024-8846 Important: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 5, 2024
References
- RHSA-2024:10147 vendor-advisory
- RHSA-2024:8846 vendor-advisory
- RHSA-2024:9051 vendor-advisory
- RHSA-2024:9454 vendor-advisory
- RHSA-2024:9459 vendor-advisory
- RHSA-2024:9926 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-9407 vdb-entry
- RHBZ#2315887 issue-tracking
- https://github.com/advisories/GHSA-fhqq-8f65-5xfc