Security update for buildah
This update for buildah fixes the following issues: Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount (bsc#1231499) - CVE-2024-9407: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208) - CVE-2024-9676: symlink traversal vulnerability in the containers/storage library can cause denial of service (bsc#1231698) - CVE-2024-9341: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) Non-security issue fixed: - default to slirp4netns on SLE instead of pasta (bsc#1232522)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for buildah fixes the following issues: Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount (bsc#1231499) - CVE-2024-9407: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208) - CVE-2024-9676: symlink traversal vulnerability in the containers/storage library can cause denial of service (bsc#1231698) - CVE-2024-9341: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) Non-security issue fixed: - default to slirp4netns on SLE instead of pasta (bsc#1232522)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1231208
- https://bugzilla.suse.com/1231230
- https://bugzilla.suse.com/1231499
- https://bugzilla.suse.com/1231698
- https://bugzilla.suse.com/1232522
- https://www.suse.com/security/cve/CVE-2024-9341
- https://www.suse.com/security/cve/CVE-2024-9407
- https://www.suse.com/security/cve/CVE-2024-9675
- https://www.suse.com/security/cve/CVE-2024-9676
- https://www.suse.com/support/update/announcement/2024/suse-su-20244303-1/