tocsin

Go/github.com/containers/buildah CVE-2024-11218: high 8.6, EPSS 0.36%

Buildah allows build breakout using malicious Containerfiles and concurrent builds

Action: Upgrade github.com/containers/buildah to 1.33.12 or later.

go get github.com/containers/buildah@v1.38.1
go get github.com/containers/buildah@v1.37.6
go get github.com/containers/buildah@v1.35.5
go get github.com/containers/buildah@v1.33.12

Affected

introducedfixedlast affected
1.38.01.38.1-
1.37.01.37.6-
1.35.01.35.5-
01.33.12-

Fixed versions

1.38.11.37.61.35.51.33.12

Sources

CVE-2024-11218 · published · modified · JSON