Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 40: FEDORA-2024-054752ae69 critical: buildah container issues

fedora
Calendar Grey November 12, 2024
Dist Fedora Esm H88
Significant revisions in Fedora 40's podman utility resolve various vulnerabilities, significantly bolstering container safety measures.
Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676.

Summary

The buildah package provides a command line tool which can be used to

* create a working container from scratch

or

* create a working container from an image as a starting point

* mount/umount a working container's root file system for manipulation

* save container's root file system layer to create a new image

* delete a working container or an image

Update Information:

Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676.

Topics%20covered

Topics Covered

security advisory Fedora input validation cryptography container security buildah

Change Log

* Fri Oct 18 2024 Packit - 2:1.37.5-1 - Update to 1.37.5 upstream release * Mon Oct 7 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream release

References


[ 1 ] Bug #2315691 - CVE-2024-9341 Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library https://bugzilla.redhat.com/show_bug.cgi?id=2315691 [ 2 ] Bug #2315887 - CVE-2024-9407 Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction https://bugzilla.redhat.com/show_bug.cgi?id=2315887

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-054752ae69' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: buildah
Product: Fedora 40
Version: 1.37.5
Release: 1.fc40
URL: https://buildah.io
Summary: A command line tool used for creating OCI Images

Topics%20covered

Topics Covered

security advisory Fedora input validation cryptography container security buildah

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here