CVE-2024-1753
4 advisories.
Go/github.com/containers/podman/v4 CVE-2024-1753: high 8.6
Podman affected by CVE-2024-1753 container escape at build time
Action: Upgrade github.com/containers/podman/v4 to 4.9.4 or later.
go get github.com/containers/podman/v4@v4.9.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.4 | - |
Fixed versions
| 4.9.4 |
Sources
- osv: GHSA-874v-pj72-92f3
- https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3
- https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf
- https://nvd.nist.gov/vuln/detail/CVE-2024-1753
- https://pkg.go.dev/vuln/GO-2024-2658
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVBSVZGVABPYIHK5HZM472NPGWMI7WXH
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOYMVMQ7RWMDTSKQTBO734BE3WQPI2AJ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FCRZVUDOFM5CPREQKBEU2VK2QK62PSBP
- https://github.com/containers/podman
- https://bugzilla.redhat.com/show_bug.cgi?id=2265513
- https://access.redhat.com/security/cve/CVE-2024-1753
- https://access.redhat.com/errata/RHSA-2024:3254
- https://access.redhat.com/errata/RHSA-2024:2877
- https://access.redhat.com/errata/RHSA-2024:2784
- https://access.redhat.com/errata/RHSA-2024:2672
- https://access.redhat.com/errata/RHSA-2024:2669
- https://access.redhat.com/errata/RHSA-2024:2645
- https://access.redhat.com/errata/RHSA-2024:2548
- https://access.redhat.com/errata/RHSA-2024:2098
- https://access.redhat.com/errata/RHSA-2024:2097
- https://access.redhat.com/errata/RHSA-2024:2090
- https://access.redhat.com/errata/RHSA-2024:2089
- https://access.redhat.com/errata/RHSA-2024:2084
- https://access.redhat.com/errata/RHSA-2024:2077
- https://access.redhat.com/errata/RHSA-2024:2066
- https://access.redhat.com/errata/RHSA-2024:2064
- https://access.redhat.com/errata/RHSA-2024:2055
- https://access.redhat.com/errata/RHSA-2024:2049
CVE-2024-1753 · published · modified · JSON
Go/github.com/containers/podman/v5 CVE-2024-1753: high 8.6
Podman affected by CVE-2024-1753 container escape at build time
Action: Upgrade github.com/containers/podman/v5 to 5.0.1 or later.
go get github.com/containers/podman/v5@v5.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.1 | - |
Fixed versions
| 5.0.1 |
Sources
- osv: GHSA-874v-pj72-92f3#Go/github.com/containers/podman/v5
- https://github.com/containers/podman/security/advisories/GHSA-874v-pj72-92f3
- https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf
- https://nvd.nist.gov/vuln/detail/CVE-2024-1753
- https://pkg.go.dev/vuln/GO-2024-2658
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZVBSVZGVABPYIHK5HZM472NPGWMI7WXH
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOYMVMQ7RWMDTSKQTBO734BE3WQPI2AJ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FCRZVUDOFM5CPREQKBEU2VK2QK62PSBP
- https://github.com/containers/podman
- https://bugzilla.redhat.com/show_bug.cgi?id=2265513
- https://access.redhat.com/security/cve/CVE-2024-1753
- https://access.redhat.com/errata/RHSA-2024:3254
- https://access.redhat.com/errata/RHSA-2024:2877
- https://access.redhat.com/errata/RHSA-2024:2784
- https://access.redhat.com/errata/RHSA-2024:2672
- https://access.redhat.com/errata/RHSA-2024:2669
- https://access.redhat.com/errata/RHSA-2024:2645
- https://access.redhat.com/errata/RHSA-2024:2548
- https://access.redhat.com/errata/RHSA-2024:2098
- https://access.redhat.com/errata/RHSA-2024:2097
- https://access.redhat.com/errata/RHSA-2024:2090
- https://access.redhat.com/errata/RHSA-2024:2089
- https://access.redhat.com/errata/RHSA-2024:2084
- https://access.redhat.com/errata/RHSA-2024:2077
- https://access.redhat.com/errata/RHSA-2024:2066
- https://access.redhat.com/errata/RHSA-2024:2064
- https://access.redhat.com/errata/RHSA-2024:2055
- https://access.redhat.com/errata/RHSA-2024:2049
CVE-2024-1753 · published · modified · JSON
Go/github.com/containers/buildah CVE-2024-1753: high
Container escape at build time
Action: Upgrade github.com/containers/buildah to 1.24.7 or later.
go get github.com/containers/buildah@v1.35.1go get github.com/containers/buildah@v1.34.3go get github.com/containers/buildah@v1.33.7go get github.com/containers/buildah@v1.27.4go get github.com/containers/buildah@v1.24.7go get github.com/containers/buildah@v1.29.3go get github.com/containers/buildah@v1.31.5go get github.com/containers/buildah@v1.32.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.35.0 | 1.35.1 | - |
| 1.34.0 | 1.34.3 | - |
| 1.33.0 | 1.33.7 | - |
| 1.25.0 | 1.27.4 | - |
| 1.24.0 | 1.24.7 | - |
| 1.28.0 | 1.29.3 | - |
| 1.30.0 | 1.31.5 | - |
| 1.32.0 | 1.32.3 | - |
Fixed versions
| 1.35.1 | 1.34.3 | 1.33.7 | 1.27.4 | 1.24.7 | 1.29.3 | 1.31.5 | 1.32.3 |
Sources
- osv: GHSA-pmf3-c36m-g5cf
- https://github.com/containers/buildah/security/advisories/GHSA-pmf3-c36m-g5cf
- https://nvd.nist.gov/vuln/detail/CVE-2024-1753
- https://github.com/containers/buildah/commit/3deda19137f5dec0285bbb832bd93c22d860b087
- https://github.com/containers/buildah/commit/9de9c20ff368beb84b84fe660773d352519dc1c5
- https://github.com/containers/buildah/commit/a030f7b8cd373075affef1f86de43a87e502f3d8
- https://bugzilla.redhat.com/show_bug.cgi?id=2265513
- https://github.com/containers/buildah
CVE-2024-1753 · published · modified · JSON
Go/github.com/containers/buildah CVE-2024-1753: unknown
Container escape at build time in github.com/containers/buildah
Action: Upgrade github.com/containers/buildah to 1.35.1 or later.
go get github.com/containers/buildah@v1.35.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.35.1 | - |
Fixed versions
| 1.35.1 |
Sources
- osv: GO-2024-2658
- https://github.com/containers/buildah/commit/9de9c20ff368beb84b84fe660773d352519dc1c5
- https://bugzilla.redhat.com/show_bug.cgi?id=2265513
CVE-2024-1753 · published · modified · JSON