ELSA-2024-8112

ELSA-2024-8112 - buildah security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-10-15

Description

[1.33.9-1.0.1]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178]

[2:1.33.9-1]
- update to the latest content of https://github.com/containers/buildah/tree/release-1.33
(https://github.com/containers/buildah/commit/4dc26b9)
- Resolves: RHEL-61116

[2:1.33.7-5]
- rebuild to address CVE-2024-34155 CVE-2024-34156 CVE-2024-34158
- Resolves: RHEL-58191 RHEL-57972 RHEL-57910

Related CVEs

CVE-2024-34155

CVE-2024-34156

CVE-2024-9341

CVE-2024-34158

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	buildah-1.33.9-1.0.1.el9_4.src.rpm	ef5c35521b36f11bd7f92ef380b0073b6f767c50657e6312372bccf6863cb17b	-	ol9_aarch64_appstream
	buildah-1.33.9-1.0.1.el9_4.aarch64.rpm	7ccd84e7fa97584e182481881a83e10ce88a06e594b07c754ebc14db82332a25	-	ol9_aarch64_appstream
	buildah-tests-1.33.9-1.0.1.el9_4.aarch64.rpm	02cd897a4e1f8e0c61bf83e147597983531efaa398dc84fa8d3671539459046e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	buildah-1.33.9-1.0.1.el9_4.src.rpm	ef5c35521b36f11bd7f92ef380b0073b6f767c50657e6312372bccf6863cb17b	-	ol9_x86_64_appstream
	buildah-1.33.9-1.0.1.el9_4.x86_64.rpm	02aedb5c9aa0346f76afd6f5523abe2ea6d8247a3d2ac02a900d530cd0b4454b	-	ol9_x86_64_appstream
	buildah-tests-1.33.9-1.0.1.el9_4.x86_64.rpm	c50fce36bd88bdcc17d103e53de4f017f958c0aacb4829b299e03cee622d7ec1	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team