Go/github.com/containers/buildah CVE-2024-9407: medium 4.7, EPSS 0.29%
Improper Input Validation in Buildah and Podman
Action: Upgrade github.com/containers/buildah to 1.37.4 or later.
go get github.com/containers/buildah@v1.37.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.37.4 | - |
Fixed versions
| 1.37.4 |
Sources
- osv: GHSA-fhqq-8f65-5xfc
- https://nvd.nist.gov/vuln/detail/CVE-2024-9407
- https://github.com/containers/buildah/commit/e4e2ad5ca2088d7c388109394135ead7aaf1f4f4
- https://access.redhat.com/errata/RHSA-2024:10147
- https://access.redhat.com/errata/RHSA-2024:8846
- https://access.redhat.com/errata/RHSA-2024:9051
- https://access.redhat.com/errata/RHSA-2024:9454
- https://access.redhat.com/errata/RHSA-2024:9459
- https://access.redhat.com/errata/RHSA-2024:9926
- https://access.redhat.com/security/cve/CVE-2024-9407
- https://bugzilla.redhat.com/show_bug.cgi?id=2315887
- https://github.com/containers/podman/releases/tag/v5.2.4
- https://pkg.go.dev/vuln/GO-2024-3169
- https://security.netapp.com/advisory/ntap-20241220-0010
CVE-2024-9407 · published · modified · JSON