SUSE-SU-2025:20013-1

Vulnerability from csaf_suse - Published: 2025-02-03 08:47 - Updated: 2026-09-20 18:07
Summary
Security update for podman
Severity
Moderate
Notes
Title of the patch: Security update for podman
Description of the patch: This update for podman fixes the following issues: - CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file (bsc#1227052). - Update to version 4.9.5: * Bump to v4.9.5 * Update release notes for v4.9.5 * fix "concurrent map writes" in network ls compat endpoint * [v4.9] Fix for CVE-2024-3727 * Disable failing bud test * CI Maintenance: Disable machine tests * [CI:DOCS] Allow downgrade of WiX * [CI:DOCS] Force WiX 3.11 * [CI:DOCS] Fix windows installer action * Bump to v4.9.5-dev * Bump to v4.9.4 * Update release notes for v4.9.4 * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 * Add farm command to commands list * Bump to FreeBSD 13.3 (13.2 vanished) * Update health-start-periods docs * Don't update health check status during initialDelaySeconds * image scp: don't require port for ssh URL * Ignore docker's end point config when the final network mode isn't bridge. * Fix running container from docker client with rootful in rootless podman. * [skip-ci] Packit: remove koji and bodhi tasks for v4.9 * Bump to v4.9.4-dev * Remove gitleaks scanning
Patchnames: SUSE-SLE-Micro-6.0-46
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2024-1753
8.6 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2024-24786
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 10 products, the same list as for CVE-2024-1753
Threats
Impact important
CVE-2024-3727
8.3 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Recommended 10 products, the same list as for CVE-2024-1753
Threats
Impact important
CVE-2024-6104
6 (Medium)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
Recommended 10 products, the same list as for CVE-2024-1753
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for podman",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for podman fixes the following issues:\n\n- CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file (bsc#1227052).\n\n- Update to version 4.9.5:\n  * Bump to v4.9.5\n  * Update release notes for v4.9.5\n  * fix \"concurrent map writes\" in network ls compat endpoint\n  * [v4.9] Fix for CVE-2024-3727\n  * Disable failing bud test\n  * CI Maintenance: Disable machine tests\n  * [CI:DOCS] Allow downgrade of WiX\n  * [CI:DOCS] Force WiX 3.11\n  * [CI:DOCS] Fix windows installer action\n  * Bump to v4.9.5-dev\n  * Bump to v4.9.4\n  * Update release notes for v4.9.4\n  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786\n  * Add farm command to commands list\n  * Bump to FreeBSD 13.3 (13.2 vanished)\n  * Update health-start-periods docs\n  * Don\u0027t update health check status during initialDelaySeconds\n  * image scp: don\u0027t require port for ssh URL\n  * Ignore docker\u0027s end point config when the final network mode isn\u0027t bridge.\n  * Fix running container from docker client with rootful in rootless podman.\n  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9\n  * Bump to v4.9.4-dev\n  * Remove gitleaks scanning\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-46",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20013-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20013-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520013-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20013-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021364.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1227052",
        "url": "https://bugzilla.suse.com/1227052"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-1753 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-1753/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-24786 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-24786/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-3727 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-3727/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-6104 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-6104/"
      }
    ],
    "title": "Security update for podman",
    "tracking": {
      "current_release_date": "2026-09-20T18:07:10Z",
      "generator": {
        "date": "2025-02-03T08:47:47Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20013-1",
      "initial_release_date": "2025-02-03T08:47:47Z",
      "revision_history": [
        {
          "date": "2025-02-03T08:47:47Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T18:07:10Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-0:4.9.5-1.1.aarch64",
                "product": {
                  "name": "podman-0:4.9.5-1.1.aarch64",
                  "product_id": "podman-0:4.9.5-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman@4.9.5-1.1?arch=aarch64\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-0:4.9.5-1.1.aarch64",
                "product": {
                  "name": "podman-remote-0:4.9.5-1.1.aarch64",
                  "product_id": "podman-remote-0:4.9.5-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman-remote@4.9.5-1.1?arch=aarch64\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-0:4.9.5-1.1.aarch64",
                "product": {
                  "name": "podmansh-0:4.9.5-1.1.aarch64",
                  "product_id": "podmansh-0:4.9.5-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podmansh@4.9.5-1.1?arch=aarch64\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-docker-0:4.9.5-1.1.noarch",
                "product": {
                  "name": "podman-docker-0:4.9.5-1.1.noarch",
                  "product_id": "podman-docker-0:4.9.5-1.1.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman-docker@4.9.5-1.1?arch=noarch\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-0:4.9.5-1.1.s390x",
                "product": {
                  "name": "podman-0:4.9.5-1.1.s390x",
                  "product_id": "podman-0:4.9.5-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman@4.9.5-1.1?arch=s390x\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-0:4.9.5-1.1.s390x",
                "product": {
                  "name": "podman-remote-0:4.9.5-1.1.s390x",
                  "product_id": "podman-remote-0:4.9.5-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman-remote@4.9.5-1.1?arch=s390x\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-0:4.9.5-1.1.s390x",
                "product": {
                  "name": "podmansh-0:4.9.5-1.1.s390x",
                  "product_id": "podmansh-0:4.9.5-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podmansh@4.9.5-1.1?arch=s390x\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-0:4.9.5-1.1.x86_64",
                "product": {
                  "name": "podman-0:4.9.5-1.1.x86_64",
                  "product_id": "podman-0:4.9.5-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman@4.9.5-1.1?arch=x86_64\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-0:4.9.5-1.1.x86_64",
                "product": {
                  "name": "podman-remote-0:4.9.5-1.1.x86_64",
                  "product_id": "podman-remote-0:4.9.5-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podman-remote@4.9.5-1.1?arch=x86_64\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podmansh-0:4.9.5-1.1.x86_64",
                "product": {
                  "name": "podmansh-0:4.9.5-1.1.x86_64",
                  "product_id": "podmansh-0:4.9.5-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:podman_project:podman:4.9.5:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/podmansh@4.9.5-1.1?arch=x86_64\u0026upstream=podman-0:4.9.5-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-0:4.9.5-1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64"
        },
        "product_reference": "podman-0:4.9.5-1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-0:4.9.5-1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x"
        },
        "product_reference": "podman-0:4.9.5-1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-0:4.9.5-1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64"
        },
        "product_reference": "podman-0:4.9.5-1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-0:4.9.5-1.1.noarch as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch"
        },
        "product_reference": "podman-docker-0:4.9.5-1.1.noarch",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-0:4.9.5-1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64"
        },
        "product_reference": "podman-remote-0:4.9.5-1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-0:4.9.5-1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x"
        },
        "product_reference": "podman-remote-0:4.9.5-1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-0:4.9.5-1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64"
        },
        "product_reference": "podman-remote-0:4.9.5-1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-0:4.9.5-1.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64"
        },
        "product_reference": "podmansh-0:4.9.5-1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-0:4.9.5-1.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x"
        },
        "product_reference": "podmansh-0:4.9.5-1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podmansh-0:4.9.5-1.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
        },
        "product_reference": "podmansh-0:4.9.5-1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-1753",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-1753"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-1753",
          "url": "https://www.suse.com/security/cve/CVE-2024-1753"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221677 for CVE-2024-1753",
          "url": "https://bugzilla.suse.com/1221677"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:47:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-1753"
    },
    {
      "cve": "CVE-2024-24786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-24786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-24786",
          "url": "https://www.suse.com/security/cve/CVE-2024-24786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1226136 for CVE-2024-24786",
          "url": "https://bugzilla.suse.com/1226136"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:47:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-24786"
    },
    {
      "cve": "CVE-2024-3727",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-3727"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-3727",
          "url": "https://www.suse.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1224112 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1224112"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1235749 for CVE-2024-3727",
          "url": "https://bugzilla.suse.com/1235749"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:47:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-3727"
    },
    {
      "cve": "CVE-2024-6104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-6104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
          "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-6104",
          "url": "https://www.suse.com/security/cve/CVE-2024-6104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1227024 for CVE-2024-6104",
          "url": "https://bugzilla.suse.com/1227024"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podman-docker-0:4.9.5-1.1.noarch",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podman-remote-0:4.9.5-1.1.x86_64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.aarch64",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.s390x",
            "SUSE Linux Micro 6.0:podmansh-0:4.9.5-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-02-03T08:47:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-6104"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.