Red Hat Security AdvisoryRHSA-2024:2586
container-tools:3.0 security update
Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+21529+674bace2.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21529+674bace2.x86_64::container-tools:3.0, buildah-tests-1.19.9-1.module+el8.4.0+21529+674bace2.x86_64::container-tools:3.0 +40
- Red Hat Enterprise Linux AppStream E4S (v.8.4) buildah-1.19.9-1.module+el8.4.0+21529+674bace2.ppc64le::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21529+674bace2.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21529+674bace2.x86_64::container-tools:3.0 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) buildah-1.19.9-1.module+el8.4.0+21529+674bace2.src::container-tools:3.0, buildah-1.19.9-1.module+el8.4.0+21529+674bace2.x86_64::container-tools:3.0, buildah-tests-1.19.9-1.module+el8.4.0+21529+674bace2.x86_64::container-tools:3.0 +40
Fixes 2 records
Priority LOW 39
In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03372 · Published 2021-08-02 · Partial fix
Priority LOW 36
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01726 · Published 2022-10-14 · Partial fix · 1.18.7, 1.19.2
