diff --git a/patchinfo.20241024112236020057.255638743075857/_patchinfo b/patchinfo.20241024112236020057.255638743075857/_patchinfo new file mode 100644 index 0000000..ae2bb48 --- /dev/null +++ b/patchinfo.20241024112236020057.255638743075857/_patchinfo @@ -0,0 +1,25 @@ + + + VUL-0: CVE-2024-9407: buildah: Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction + VUL-0: CVE-2024-9341: buildah,podman: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library + VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary directory mount + VUL-0: CVE-2024-9676: buildah,podman,skopeo: github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) + + + + + + danishprakash + moderate + security + Security update for podman + This update for podman fixes the following issues: + +- CVE-2024-9676: Fixed a denial of service via a symlink traversal in the containers/storage library (bsc#1231698) +- CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230) +- CVE-2024-9675: Fixed caching of arbitrary directory mount (bsc#1231499) +- CVE-2024-9407: Fixed improper input validation in bind-propagation option of Dockerfile RUN --mount instruction (bsc#1231208) + + podman + +