File _patchinfo of Package patchinfo.32912

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.32912

<patchinfo incident="32912">
  <issue tracker="cve" id="2024-1753"/>
  <issue tracker="bnc" id="1221677">VUL-0: CVE-2024-1753: buildah: full container escape at build time</issue>
  <issue tracker="bnc" id="1220568">Missing cni-plugins in buildah</issue>
  <issue tracker="bnc" id="1219563">docker v.25.0 breaks API compatibility with skopeo/buildah [ref:_00D1igLOd._500Tr4rZDT:ref]</issue>
  <packager>dancermak</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for buildah</summary>
  <description>This update for buildah fixes the following issues:

- CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
- Update to version 1.34.1 for compatibility with Docker 25.0
  (which is not in SLES yet, but will eventually be) (bsc#1219563).
  See the corresponding release notes:
  * https://github.com/containers/buildah/releases/tag/v1.34.1
  * https://github.com/containers/buildah/releases/tag/v1.34.0
  * https://github.com/containers/buildah/releases/tag/v1.33.0
  * https://github.com/containers/buildah/releases/tag/v1.32.0
  * https://github.com/containers/buildah/releases/tag/v1.31.0
  * https://github.com/containers/buildah/releases/tag/v1.30.0

- Require cni-plugins (bsc#1220568)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.32912

Places