Lucene search
OracleLinuxELSA-2024-4378HistoryJul 08, 2024 - 12:00 a.m.
podman security update
2024-07-0800:00:00
linux.oracle.com
6
podman
security update
execvp error
remote build
container startup
gzip
overlay put
nmap-ncat
cve-2024-1394
rhel-40793
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
30.8%
[4.9.4-5.0.1]
- Fixes issue of podman execvp error while using podmansh [Orabug: 36073625]
- Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655]
- Add devices on container startup, not on creation
- Backport fast gzip for compression [Orabug: 36420418]
- overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
- Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]
[4:4.9.4-5] - rebuild for CVE-2024-1394
- Resolves: RHEL-40793
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | podman | < 4.9.4-5.0.1.el9_4 | podman-4.9.4-5.0.1.el9_4.src.rpm |
| oracle linux | 9 | aarch64 | podman | < 4.9.4-5.0.1.el9_4 | podman-4.9.4-5.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | noarch | podman-docker | < 4.9.4-5.0.1.el9_4 | podman-docker-4.9.4-5.0.1.el9_4.noarch.rpm |
| oracle linux | 9 | aarch64 | podman-plugins | < 4.9.4-5.0.1.el9_4 | podman-plugins-4.9.4-5.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | podman-remote | < 4.9.4-5.0.1.el9_4 | podman-remote-4.9.4-5.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | aarch64 | podman-tests | < 4.9.4-5.0.1.el9_4 | podman-tests-4.9.4-5.0.1.el9_4.aarch64.rpm |
| oracle linux | 9 | src | podman | < 4.9.4-5.0.1.el9_4 | podman-4.9.4-5.0.1.el9_4.src.rpm |
| oracle linux | 9 | x86_64 | podman | < 4.9.4-5.0.1.el9_4 | podman-4.9.4-5.0.1.el9_4.x86_64.rpm |
| oracle linux | 9 | noarch | podman-docker | < 4.9.4-5.0.1.el9_4 | podman-docker-4.9.4-5.0.1.el9_4.noarch.rpm |
| oracle linux | 9 | x86_64 | podman-plugins | < 4.9.4-5.0.1.el9_4 | podman-plugins-4.9.4-5.0.1.el9_4.x86_64.rpm |
Related
nessus
nessus
Oracle Linux 8 : grafana (ELSA-2024-1646)
2024-04-03 00:00:00
Rocky Linux 8 : grafana (RLSA-2024:1646)
2024-04-05 00:00:00
AlmaLinux 9 : podman (ALSA-2024:4378)
2024-07-10 00:00:00
almalinux
almalinux
Important: runc security update
2024-07-23 00:00:00
Important: containernetworking-plugins security update
2024-07-23 00:00:00
Important: grafana-pcp security and bug fix update
2024-04-02 00:00:00
osv
osv
Important: golang security update
2024-03-21 00:00:00
Memory leaks in code encrypting and verifying RSA payloads
2024-03-20 18:10:36
Important: podman security update
2024-07-08 00:00:00
oraclelinux
oraclelinux
grafana-pcp security and bug fix update
2024-04-03 00:00:00
grafana security update
2024-03-26 00:00:00
runc security update
2024-07-23 00:00:00
vulnrichment
vulnrichment
rocky
rocky
grafana-pcp security update
2024-05-10 14:32:42
skopeo security update
2024-07-26 12:33:59
grafana-pcp bug fix and enhancement update
2024-06-14 13:59:30
redhat
redhat
(RHSA-2024:1462) Important: golang security update
2024-03-21 08:05:03
(RHSA-2024:1502) Important: grafana-pcp security update
2024-03-25 19:27:15
veracode
veracode
Memory Leak
2024-03-28 05:55:40
nvd
nvd
CVE-2024-1394
2024-03-21 13:00:08
github
github
Memory leaks in code encrypting and verifying RSA payloads
2024-03-20 18:10:36
redhatcve
redhatcve
CVE-2024-1394
2024-03-20 18:01:24
cve
cve
CVE-2024-1394
2024-03-21 13:00:08
cvelist
cvelist
ibm
ibm
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.8
Confidence
High
EPSS
0.001
Percentile
30.8%
Related for ELSA-2024-4378