Go/github.com/containers/buildah CVE-2024-1753: high, EPSS 0.46%
Container escape at build time
Action: Upgrade github.com/containers/buildah to 1.24.7 or later.
go get github.com/containers/buildah@v1.35.1go get github.com/containers/buildah@v1.34.3go get github.com/containers/buildah@v1.33.7go get github.com/containers/buildah@v1.27.4go get github.com/containers/buildah@v1.24.7go get github.com/containers/buildah@v1.29.3go get github.com/containers/buildah@v1.31.5go get github.com/containers/buildah@v1.32.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.35.0 | 1.35.1 | - |
| 1.34.0 | 1.34.3 | - |
| 1.33.0 | 1.33.7 | - |
| 1.25.0 | 1.27.4 | - |
| 1.24.0 | 1.24.7 | - |
| 1.28.0 | 1.29.3 | - |
| 1.30.0 | 1.31.5 | - |
| 1.32.0 | 1.32.3 | - |
Fixed versions
| 1.35.1 | 1.34.3 | 1.33.7 | 1.27.4 | 1.24.7 | 1.29.3 | 1.31.5 | 1.32.3 |
Sources
- osv: GHSA-pmf3-c36m-g5cf
- https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf
- https://nvd.nist.gov/vuln/detail/CVE-2024-1753
- https://github.com/containers/buildah/commit/3deda19137f5dec0285bbb832bd93c22d860b087
- https://github.com/containers/buildah/commit/9de9c20ff368beb84b84fe660773d352519dc1c5
- https://github.com/containers/buildah/commit/a030f7b8cd373075affef1f86de43a87e502f3d8
- https://bugzilla.redhat.com/show_bug.cgi?id=2265513
- https://github.com/containers/buildah
CVE-2024-1753 · published · modified · JSON