Red Hat buildah Security Update (RHSA-2024:9459) with Multiple CVEs

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability ID: RHSA-2024:9459 2. Release Date: November 12, 2024 3. Update Date: November 12, 2024 4. Type/Severity: Security Advisory, Important 5. Subject: Buildah Security Update 6. Description: - Buildah provides a tool for building OCI container images. - It includes creating working containers, either from scratch or using an image as a starting point; creating images, either from a working container or using instructions in a Dockerfile; building Docker and OCI images. 7. Security Fixes: - go/parser: golang: Calling Parse function with deeply nested literals causes panic/stack exhaustion (CVE-2024-34155) - encoding/gob: golang: Calling Decoder.Decode on messages with deeply nested structures causes panic due to stack exhaustion (CVE-2024-34156) - go/build/constraint: golang: Calling Parse on “// +build” build tag lines with deeply nested expressions causes panic due to stack exhaustion (CVE-2024-34158) - Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) - Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (CVE-2024-9407) - buildah: Buildah allows arbitrary directory mount (CVE-2024-9675) - Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2表-9676) 8. Affected Products: - Red Hat Enterprise Linux for x86_64 9 x86_64 - Red Hat Enterprise Linux for IBM z Systems 9 s390x - Red Hat Enterprise Linux for Power, little endian 9 ppc64le - Red Hat Enterprise Linux for ARM 64 9 aarch64 9. CVE IDs: - CVE-2024-9341 - CVE-2024-9407 - CVE-2024-9675 - CVE-2024-9676 - CVE-2024-34155 - CVE-2024-34156 - CVE-2024-34158 10. Contact Information: - Red Hat Security Contact: secalert@redhat.com - More contact details: https://access.redhat.com/security/team/contact/

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat buildah Security Update (RHSA-2024:9459) with Multiple CVEs

More from this source