SUSE-SU-2024:2090-1

Details

This update for podman fixes the following issues:

Update to version 4.9.5
CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks. (bsc#1224122)
CVE-2024-24786: Fixed an infinite loop in protojson. (bsc#1226136)

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpodman

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpodman-docker

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpodman-remote

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpodman

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpodman-docker

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpodman-remote

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Micro 5.3podman

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Micro 5.4podman

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpodman

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpodman-docker

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpodman-remote

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4podman

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4podman-docker

Fixed in:

4.9.5-150400.4.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4podman-remote

Fixed in:

4.9.5-150400.4.27.1

openSUSE:Leap Micro 5.3podman

Fixed in:

4.9.5-150400.4.27.1

openSUSE:Leap Micro 5.4podman

Fixed in:

4.9.5-150400.4.27.1

References

REPORThttps://bugzilla.suse.com/1224122 REPORThttps://bugzilla.suse.com/1226136 WEBhttps://www.suse.com/security/cve/CVE-2024-24786 WEBhttps://www.suse.com/security/cve/CVE-2024-3727 ADVISORYhttps://www.suse.com/support/update/announcement/2024/suse-su-20242090-1/

SUSE-SU-2024:2090-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline