Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Oracle Linux 9 ELSA-2024-9459 Critical: buildah Important Update

oracle
Calendar Grey November 21, 2024
Scroller Oracle
New Oracle Linux rpm packages for buildah bolster security measures and address concerns outlined in advisory ELSA-2024-9459.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[1.37.5-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.37.5-1] - update to https://github.com/containers/buildah/releases/tag/v1.37.5 - Resolves: RHEL-61857 [2:1.37.4-2] - enable CNI - Resolves: RHEL-62107 [2:1.37.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.37.4 - Resolves: RHEL-61114 [2:1.37.2-2] - rebuild to fix CVE-2024-34156 - Resolves: RHEL-57912

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//buildah-1.37.5-1.0.1.el9_5.src.rpm

x86_64

buildah-1.37.5-1.0.1.el9_5.x86_64.rpm buildah-tests-1.37.5-1.0.1.el9_5.x86_64.rpm

aarch64

buildah-1.37.5-1.0.1.el9_5.aarch64.rpm buildah-tests-1.37.5-1.0.1.el9_5.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2024-9341 CVE-2024-9407 CVE-2024-9675 CVE-2024-9676 CVE-2024-34155 CVE-2024-34156 CVE-2024-34158

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.