p PatchFirst

SUSE-SU-2024:3545-1

SUSE-SU-2024:3545-1 · Security update for buildah

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for buildah fixes the following issues: - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208). - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library in cri-o (nsc#1231230).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • buildah SUSE:Linux Enterprise Module for Containers 15 SP5

    Affected ranges
    • ECOSYSTEM: < 1.35.4-150500.3.13.1

    Update to 1.35.4-150500.3.13.1

  • buildah SUSE:Linux Enterprise Module for Containers 15 SP6

    Affected ranges
    • ECOSYSTEM: < 1.35.4-150500.3.13.1

    Update to 1.35.4-150500.3.13.1

  • buildah openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 1.35.4-150500.3.13.1

    Update to 1.35.4-150500.3.13.1

  • buildah openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 1.35.4-150500.3.13.1

    Update to 1.35.4-150500.3.13.1

Original sources

Check your server →