Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-9097

Опубликовано: 14 нояб. 2024
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2024-9097: buildah security update (MODERATE)

[1.37.2-1.0.1]

  • Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.37.2-1]

[2:1.37.1-1]

[2:1.37.0-1]

[2:1.36.0-1]

[2:1.35.2-1]

[2:1.35.1-1]

[2:1.35.0-1]

[2:1.33.6-2]

  • update tags for systemd libsubid
  • Resolves: RHEL-26594

[2:1.33.6-1]

[2:1.33.5-1]

[2:1.33.4-1]

  • revert back to 1.33.4
  • Related: Jira:RHEL-2112

[1:1.34.0-1]

[1:1.33.2-1]

  • Bump to v1.33.2
  • Related: Jira:RHEL-2112

[1:1.33.1-3]

  • Rebuild for CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  • Related: Jira:RHEL-2779

[1:1.33.1-2]

  • Fix gating issues in tests/tests.yml
  • Related: RHEL-2112

[1:1.33.1-1]

[1:1.32.2-1]

[1:1.32.1-1]

[1:1.32.0-1]

[1:1.31.3-1]

[1:1.31.2-1]

[1:1.31.1-2]

  • build buildah off main branch for early testing of zstd compression
  • Related: #2176063

[1:1.31.1-1]

[1:1.31.0-1]

[1:1.30.0-2]

  • rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  • Resolves: #2175073
  • Resolves: #2179958
  • Resolves: #2187332
  • Resolves: #2187375
  • Resolves: #2203696
  • Resolves: #2207518

[1:1.30.0-1]

  • update to 1.30.0
  • Related: #2176063

[1:1.29.1-2]

[1:1.29.1-1]

[1:1.29.0-3]

[1:1.29.0-2]

[1:1.29.0-1]

[1:1.29.0-0.4]

[1:1.29.0-0.3]

[1:1.29.0-0.2]

[1:1.29.0-0.1]

[1:1.28.2-3]

[1:1.28.2-2]

[1:1.28.2-1]

[1:1.28.0-2]

  • pull in crun by default
  • Resolves: #2142494

[1:1.28.0-1]

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

buildah

1.37.2-1.0.1.el9

buildah-tests

1.37.2-1.0.1.el9

Oracle Linux x86_64

buildah

1.37.2-1.0.1.el9

buildah-tests

1.37.2-1.0.1.el9

Связанные CVE

Связанные уязвимости

oracle-oval
7 месяцев назад

ELSA-2024-9102: podman security update (MODERATE)

oracle-oval
7 месяцев назад

ELSA-2024-9098: skopeo security update (MODERATE)

CVSS3: 8.3
ubuntu
около 1 года назад

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

CVSS3: 8.3
redhat
около 1 года назад

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

CVSS3: 8.3
nvd
около 1 года назад

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.