← Search the atlas
SUSE-SU-2024:1144-1
Not scored
Security update for buildah
This update for buildah fixes the following issues:
- CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
- Update to version 1.34.1 for compatibility with Docker 25.0
(which is not in SLES yet, but will eventually be) (bsc#1219563).
See the corresponding release notes:
* https://github.com/containers/buildah/releases/tag/v1.34.1
* https://github.com/containers/buildah/releases/tag/v1.34.0
* https://github.com/containers/buildah/releases/tag/v1.33.0
* https://github.com/containers/buildah/releases/tag/v1.32.0
* https://github.com/containers/buildah/releases/tag/v1.31.0
* https://github.com/containers/buildah/releases/tag/v1.30.0
- Require cni-plugins (bsc#1220568)
Exploit probability
Not scored
Published
April 8, 2024
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
buildah
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
cni-plugins
SUSE:Linux Enterprise Micro 5.3
cni
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
cni
SUSE:Linux Enterprise Server 15 SP2-LTSS
cni-plugins
SUSE:Linux Enterprise Micro 5.2
cni
openSUSE:Leap Micro 5.3
cni
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
cni
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
cni-plugins
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
cni-plugins
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
cni-plugins
SUSE:Linux Enterprise Server 15 SP3-LTSS
cni
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
cni
SUSE:Linux Enterprise Server 15 SP4-LTSS
cni
SUSE:Linux Enterprise Server 15 SP4-LTSS
cni-plugins
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
cni
SUSE:Linux Enterprise Micro 5.4
cni
SUSE:Linux Enterprise Micro 5.1
cni
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
cni
openSUSE:Leap Micro 5.4
cni
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
cni
SUSE:Linux Enterprise Server 15 SP4-LTSS
buildah
SUSE:Linux Enterprise Micro 5.3
cni-plugins
SUSE:Linux Enterprise Micro 5.2
cni-plugins
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
cni-plugins
SUSE:Linux Enterprise Micro 5.1
cni-plugins
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
buildah
SUSE:Linux Enterprise Micro 5.4
cni-plugins
SUSE:Enterprise Storage 7.1
cni
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
cni-plugins
openSUSE:Leap Micro 5.3
cni-plugins
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
cni
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
cni
SUSE:Enterprise Storage 7.1
cni-plugins
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
cni-plugins
SUSE:Linux Enterprise Server 15 SP3-LTSS
cni-plugins
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
buildah
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
cni-plugins
openSUSE:Leap Micro 5.4
cni-plugins
SUSE:Linux Enterprise Server 15 SP2-LTSS
cni
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2024:1144-1
This update for buildah fixes the following issues:
- CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
- Update to version 1.34.1 for compatibility with Docker 25.0
(which is not in SLES yet, but will eventually be) (bsc#1219563).
See the corresponding release notes:
* https://github.com/containers/buildah/releases/tag/v1.34.1
* https://github.com/containers/buildah/releases/tag/v1.34.0
* https://github.com/containers/buildah/releases/tag/v1.33.0
* https://github.com/containers/buildah/releases/tag/v1.32.0
* https://github.com/containers/buildah/releases/tag/v1.31.0
* https://github.com/containers/buildah/releases/tag/v1.30.0
- Require cni-plugins (bsc#1220568)
View original source ↗
05 / REFERENCES
Further evidence