ALSA-2024:2550

Source
https://errata.almalinux.org/9/ALSA-2024-2550.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:2550.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2024:2550
Related
Published
2024-04-30T00:00:00Z
Modified
2024-05-07T14:54:52Z
Summary
Moderate: buildah bug fix update
Details

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Bug Fix(es):

  • TRIAGE CVE-2024-24786 buildah: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [almalinux-9] AlmaLinux9.4 0Day (JIRA:AlmaLinux-28230)
References

Affected packages

AlmaLinux:9 / buildah

Package

Name
buildah

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:1.33.7-1.el9_4

AlmaLinux:9 / buildah-tests

Package

Name
buildah-tests

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:1.33.7-1.el9_4