CVE-2024-9676 affecting package buildah for versions less than 1.41.4-2

CVE-2024-9676 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-45338 affecting package buildah for versions less than 1.41.4-2

CVE-2024-45338 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-32149 affecting package buildah for versions less than 1.41.4-2

CVE-2022-32149 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2019-11254 affecting package buildah for versions less than 1.41.4-2

CVE-2019-11254 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-21626 affecting package buildah for versions less than 1.41.4-2

CVE-2024-21626 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package buildah for versions less than 1.41.4-2

CVE-2022-29526 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2

CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

AZL-45360 CVE-2021-4235 affecting package buildah for versions less than 1.41.4-2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector...

AZL-44877 CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...