ELSA-2024-8112

ELSA-2024-8112 - buildah security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-10-15

Description

[1.33.9-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.33.9-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/4dc26b9)
- Resolves: RHEL-61116

[2:1.33.7-5]
- rebuild to address CVE-2024-34155 CVE-2024-34156 CVE-2024-34158
- Resolves: RHEL-58191 RHEL-57972 RHEL-57910

Related CVEs

CVE-2024-34155

CVE-2024-34156

CVE-2024-9341

CVE-2024-34158

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	buildah-1.33.9-1.0.1.el9_4.src.rpm	be1a6874e30e6f26f52567d1ad060f0f	-	ol9_aarch64_appstream
	buildah-1.33.9-1.0.1.el9_4.aarch64.rpm	a5dc50e58dc26be5480a6bf7a5863448	-	ol9_aarch64_appstream
	buildah-tests-1.33.9-1.0.1.el9_4.aarch64.rpm	b24f8d7af55b755593fde9bf6521f023	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	buildah-1.33.9-1.0.1.el9_4.src.rpm	be1a6874e30e6f26f52567d1ad060f0f	-	ol9_x86_64_appstream
	buildah-1.33.9-1.0.1.el9_4.x86_64.rpm	e7a70be9bbd9567eda5892a152dc3649	-	ol9_x86_64_appstream
	buildah-tests-1.33.9-1.0.1.el9_4.x86_64.rpm	e277b88c6ab77040ed9190c8bd5d867a	-	ol9_x86_64_appstream