Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 41: buildah 2024-2e8c63e8bf Security Advisory Updates

fedora
Calendar Grey October 13, 2024
Dist Fedora Esm H88
Update for Buildah in Fedora 41 addresses critical issues including FIPS crypto-policy directory mounting and input validation.
Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41

Summary

The buildah package provides a command line tool which can be used to

* create a working container from scratch

or

* create a working container from an image as a starting point

* mount/umount a working container's root file system for manipulation

* save container's root file system layer to create a new image

* delete a working container or an image

Update Information:

Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41. Changelog for buildah * Mon Oct 07 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream release Changelog for podman * Mon Oct 07 2024 Packit - 5:5.2.4-1 - Update to 5.2.4 upstream release Fixes CVE-2024-9341 and CVE-2024-9407.

Topics%20covered

Topics Covered

No topics assigned

Change Log

* Mon Oct 7 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream release

References


[ 1 ] Bug #2315691 - CVE-2024-9341 Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library https://bugzilla.redhat.com/show_bug.cgi?id=2315691 [ 2 ] Bug #2315887 - CVE-2024-9407 Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction https://bugzilla.redhat.com/show_bug.cgi?id=2315887

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2e8c63e8bf' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: buildah
Product: Fedora 41
Version: 1.37.4
Release: 1.fc41
URL: https://buildah.io
Summary: A command line tool used for creating OCI Images

Topics%20covered

Topics Covered

No topics assigned

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here