Описание
Security update for podman
This update for podman fixes the following issues:
- Update to version 4.9.5
- CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122)
- CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)
Список пакетов
Container suse/sle-micro/5.5:latest
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-EC2-llc
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Server-5-0-EC2-ltd
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-Azure
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-BYOS
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-EC2
podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Micro-5-5-GCE
podman-4.9.5-150500.3.12.1
SUSE Linux Enterprise Micro 5.5
podman-4.9.5-150500.3.12.1
podman-docker-4.9.5-150500.3.12.1
podman-remote-4.9.5-150500.3.12.1
podmansh-4.9.5-150500.3.12.1
SUSE Linux Enterprise Module for Containers 15 SP5
podman-4.9.5-150500.3.12.1
podman-docker-4.9.5-150500.3.12.1
podman-remote-4.9.5-150500.3.12.1
podmansh-4.9.5-150500.3.12.1
SUSE Linux Enterprise Module for Containers 15 SP6
podman-4.9.5-150500.3.12.1
podman-docker-4.9.5-150500.3.12.1
podman-remote-4.9.5-150500.3.12.1
podmansh-4.9.5-150500.3.12.1
openSUSE Leap 15.5
podman-4.9.5-150500.3.12.1
podman-docker-4.9.5-150500.3.12.1
podman-remote-4.9.5-150500.3.12.1
podmansh-4.9.5-150500.3.12.1
openSUSE Leap 15.6
podman-4.9.5-150500.3.12.1
podman-docker-4.9.5-150500.3.12.1
podman-remote-4.9.5-150500.3.12.1
podmansh-4.9.5-150500.3.12.1
Ссылки
- Link for SUSE-SU-2024:2031-1
- E-Mail link for SUSE-SU-2024:2031-1
- SUSE Security Ratings
- SUSE Bug 1224122
- SUSE Bug 1226136
- SUSE CVE CVE-2024-24786 page
- SUSE CVE CVE-2024-3727 page
Описание
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
Затронутые продукты
Container suse/sle-micro/5.5:latest:podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:podman-4.9.5-150500.3.12.1
Ссылки
- CVE-2024-24786
- SUSE Bug 1226136
Описание
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
Затронутые продукты
Container suse/sle-micro/5.5:latest:podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:podman-4.9.5-150500.3.12.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:podman-4.9.5-150500.3.12.1
Ссылки
- CVE-2024-3727
- SUSE Bug 1224112