Red Hat Security Advisory

RHSA-2024:6194

podman security update

Released 2024-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) podman-4:4.9.4-10.el9_4, podman-docker-4:4.9.4-10.el9_4, podman-plugins-4:4.9.4-10.el9_4 +2

TI-2024-24810 CVE-2024-37298 · GHSA-3669-72x9-r9p3

HIGH 72

gorilla/schema converts structs to and from form values.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2024-07-01 Partial fix · 1.4.1 CWE-770

TI-2024-16300 CVE-2024-24783 · GHSA-3q2c-pvp5-3cqp

LOW 28

Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00667 Published 2024-03-05 Partial fix · 1.21.8, 1.22.1 CWE-476

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532