RHSA-2024:1150: Moderate: buildah security update
Moderate: buildah security update
Other sources
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1150?
The severity of RHSA-2024:1150 is categorized as Moderate.
How do I fix RHSA-2024:1150?
To fix RHSA-2024:1150, update your buildah package to version 1.31.4-1.el9_3.
Which operating systems are affected by RHSA-2024:1150?
RHSA-2024:1150 affects Red Hat Enterprise Linux across multiple architectures, including x86_64 and ARM.
What packages are updated in RHSA-2024:1150?
The RHSA-2024:1150 update applies to buildah, buildah-debuginfo, buildah-debugsource, and related testing packages.
Is RHSA-2024:1150 applicable to my installation?
Check if you are running buildah version lower than 1.31.4-1.el9_3 to determine if RHSA-2024:1150 is applicable.