products/SUSE_ALP_Standard
9
0
Fork 1
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Adding patchinfo patchinfo.20241016073844032466.269002615871826

Browse Source
This commit is contained in:
Adrian Schröter 2024-11-13 09:22:27 +01:00
parent 92f726f5ad
commit 0f84537cd6
2 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
buildah

@ -1 +1 @@
Subproject commit 0e47ce7a1d4ed7897ccf85834e87ff6c8c3938f4
Subproject commit fca801e8210f0f1ec07b9adcf07b86bf7d053998

21
patchinfo.20241016073844032466.269002615871826/_patchinfo Normal file
View File

@ -0,0 +1,21 @@
<patchinfo>
<!-- generated from request(s) 348600 -->
<issue tracker="bnc" id="1231208">VUL-0: CVE-2024-9407: buildah: Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction</issue>
<issue tracker="bnc" id="1231230">VUL-0: CVE-2024-9341: buildah,podman: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library</issue>
<issue tracker="bnc" id="1231499">VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary directory mount</issue>
<issue tracker="cve" id="2024-9341"/>
<issue tracker="cve" id="2024-9407"/>
<issue tracker="cve" id="2024-9675"/>
<packager>danishprakash</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for buildah</summary>
<description>This update for buildah fixes the following issues:
- CVE-2024-9675: Fixed caching of arbitrary directory mount (bsc#1231499)
- CVE-2024-9407: Fixed improper input validation in bind-propagation option of dockerfile RUN --mount instruction (bsc#1231208)
- CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230)
</description>
<package>buildah</package>
<seperate_build_arch/>
</patchinfo>