Red Hat Security Advisory

RHSA-2024:8846

container-tools:rhel8 security update

Released 2024-11-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+22397+e3c95ba6.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+22397+e3c95ba6.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+22397+e3c95ba6.s390x::container-tools:rhel8 +47

TI-2024-08665 CVE-2024-9341 · GHSA-mc76-5925-c5p6

LOW 38

A flaw was found in Go.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01028 Published 2024-10-01 Fixed in 0.60.4, 8100020241023085649.afee755d +340 CWE-59

TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22

TI-2024-08728 CVE-2024-9407 · GHSA-fhqq-8f65-5xfc

LOW 23

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction.

CVSS 3.1MEDIUM 4.7 Local High privileges No interaction EPSS 0.00288 Published 2024-10-01 Partial fix · 5.2.4, 1.37.4 +6 CWE-20