Security update for podman
This update for podman fixes the following issues: - CVE-2024-9676: Fixed a denial of service via a symlink traversal in the containers/storage library (bsc#1231698) - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) - CVE-2024-9675: Fixed caching of arbitrary directory mount (bsc#1231499) - CVE-2024-9407: Fixed improper input validation in bind-propagation option of Dockerfile RUN --mount instruction (bsc#1231208)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for podman fixes the following issues: - CVE-2024-9676: Fixed a denial of service via a symlink traversal in the containers/storage library (bsc#1231698) - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) - CVE-2024-9675: Fixed caching of arbitrary directory mount (bsc#1231499) - CVE-2024-9407: Fixed improper input validation in bind-propagation option of Dockerfile RUN --mount instruction (bsc#1231208)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1231208
- https://bugzilla.suse.com/1231230
- https://bugzilla.suse.com/1231499
- https://bugzilla.suse.com/1231698
- https://www.suse.com/security/cve/CVE-2024-6104
- https://www.suse.com/security/cve/CVE-2024-9341
- https://www.suse.com/security/cve/CVE-2024-9407
- https://www.suse.com/security/cve/CVE-2024-9675
- https://www.suse.com/security/cve/CVE-2024-9676
- https://www.suse.com/support/update/announcement/2025/suse-su-202520080-1/