CVE-2024-11218

buildah: This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error w...

CVE-2024-11218 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2024-11218, released January 22, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.6
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0037
30th percentile

This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. (bsc#1236272)

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.1-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
aardvark-dns · almalinux 8 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:1372 Feb 13, 2025
aardvark-dns · ol 8 2:1.10.1-2.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
aardvark-dns · rocky 8 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2025:1372 Feb 13, 2025
buildah · RHEL 8 2:1.33.12-1.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
buildah · RHEL 9 2:1.37.6-1.el9_5 RHSA-2025:0923 Feb 4, 2025
buildah · almalinux 8 2:1.33.12-1.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
buildah · almalinux 9 2:1.37.6-1.el9_5 ALSA-2025:0923 Feb 4, 2025
buildah · ol 8 2:1.33.12-1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
buildah · ol 9 2:1.37.6-1.0.1.el9_5 ELSA-2025-0923 Feb 4, 2025
buildah · opensuse-leap 15.6 1.35.5-150500.3.25.1 SUSE-SU-2025:0301-1 Jan 30, 2025
buildah · rocky 8 2:1.33.12-1.module+el8.10.0+1933+1fc610b1 RLSA-2025:1372 Feb 13, 2025
buildah · rocky 9 2:1.37.6-1.el9_5 RLSA-2025:0923 May 7, 2025
buildah · sles 15.6 1.35.5-150500.3.25.1 SUSE-SU-2025:0301-1 Jan 30, 2025
buildah-tests · RHEL 8 2:1.33.12-1.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
buildah-tests · RHEL 9 2:1.37.6-1.el9_5 RHSA-2025:0923 Feb 4, 2025
buildah-tests · almalinux 8 2:1.33.12-1.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
buildah-tests · almalinux 9 2:1.37.6-1.el9_5 ALSA-2025:0923 Feb 4, 2025
buildah-tests · ol 8 2:1.33.12-1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
buildah-tests · ol 9 2:1.37.6-1.0.1.el9_5 ELSA-2025-0923 Feb 4, 2025
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:1372 Feb 13, 2025
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
containernetworking-plugins · RHEL 8 1:1.4.0-5.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
containernetworking-plugins · almalinux 8 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
containernetworking-plugins · ol 8 1:1.4.0-5.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
containernetworking-plugins · rocky 8 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2025:1372 Feb 13, 2025
containers-common · RHEL 8 2:1-82.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
containers-common · almalinux 8 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
containers-common · ol 8 2:1-82.0.1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
containers-common · rocky 8 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2025:1372 Feb 13, 2025
crit · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
crit · almalinux 8 3.18-5.module_el8.10.0+3901+4b80ecd7 ALSA-2025:1372 Feb 13, 2025
crit · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
criu · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
criu · almalinux 8 3.18-5.module_el8.10.0+3926+f12484f5 ALSA-2025:1372 Feb 13, 2025
criu · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
criu · rocky 8 0:3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
criu-devel · almalinux 8 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2025:1372 Feb 13, 2025
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2025:1372 Feb 13, 2025
crun · ol 8 0:1.14.3-2.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:1372 Feb 13, 2025
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
golang-github-containers-buildah · Debian 13.5 (trixie) 1.38.1+ds1-1 DEBIAN-CVE-2024-11218 Jan 22, 2025
golang-github-containers-buildah · Debian 14 1.38.1+ds1-1 DEBIAN-CVE-2024-11218 Jan 22, 2025
govulncheck-vulndb · opensuse-leap 15.6 0.0.20250128T150132-150000.1.29.1 SUSE-SU-2025:0297-1 Jan 30, 2025
govulncheck-vulndb · sles 15.6 0.0.20250128T150132-150000.1.29.1 SUSE-SU-2025:0297-1 Jan 30, 2025
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:1372 Feb 13, 2025
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+3926+f12484f5 ALSA-2025:1372 Feb 13, 2025
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:1372 Feb 13, 2025
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
podman · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman · RHEL 9 4:5.2.2-13.el9_5 RHSA-2025:0922 Feb 4, 2025
podman · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman · almalinux 9 4:5.2.2-13.el9_5 ALSA-2025:0922 Feb 4, 2025
podman · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman · ol 9 4:5.2.2-13.0.1.el9_5 ELSA-2025-0922 Feb 4, 2025
podman · opensuse-leap 15.6 4.9.5-150500.3.31.1 SUSE-SU-2025:0382-1 Feb 7, 2025
podman · rocky 8 4:4.9.4-19.module+el8.10.0+1933+1fc610b1 RLSA-2025:1372 Feb 13, 2025
podman · rocky 9 4:5.2.2-13.el9_5 RLSA-2025:0922 Mar 17, 2025
podman · sles 15.6 4.9.5-150500.3.31.1 SUSE-SU-2025:0382-1 Feb 7, 2025
podman-catatonit · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman-catatonit · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman-catatonit · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman-docker · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman-docker · RHEL 9 4:5.2.2-13.el9_5 RHSA-2025:0922 Feb 4, 2025
podman-docker · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman-docker · almalinux 9 4:5.2.2-13.el9_5 ALSA-2025:0922 Feb 4, 2025
podman-docker · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman-docker · ol 9 4:5.2.2-13.0.1.el9_5 ELSA-2025-0922 Feb 4, 2025
podman-gvproxy · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman-gvproxy · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman-gvproxy · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman-plugins · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman-plugins · RHEL 9 4:5.2.2-13.el9_5 RHSA-2025:0922 Feb 4, 2025
podman-plugins · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman-plugins · almalinux 9 4:5.2.2-13.el9_5 ALSA-2025:0922 Feb 4, 2025
podman-plugins · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman-plugins · ol 9 4:5.2.2-13.0.1.el9_5 ELSA-2025-0922 Feb 4, 2025
podman-remote · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman-remote · RHEL 9 4:5.2.2-13.el9_5 RHSA-2025:0922 Feb 4, 2025
podman-remote · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman-remote · almalinux 9 4:5.2.2-13.el9_5 ALSA-2025:0922 Feb 4, 2025
podman-remote · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman-remote · ol 9 4:5.2.2-13.0.1.el9_5 ELSA-2025-0922 Feb 4, 2025
podman-tests · RHEL 8 4:4.9.4-19.module+el8.10.0+22744+7794713b RHSA-2025:1372 Feb 13, 2025
podman-tests · RHEL 9 4:5.2.2-13.el9_5 RHSA-2025:0922 Feb 4, 2025
podman-tests · almalinux 8 4:4.9.4-19.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
podman-tests · almalinux 9 4:5.2.2-13.el9_5 ALSA-2025:0922 Feb 4, 2025
podman-tests · ol 8 4:4.9.4-19.0.1.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
podman-tests · ol 9 4:5.2.2-13.0.1.el9_5 ELSA-2025-0922 Feb 4, 2025
python-podman · rocky 8 0:4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2025:1372 Feb 13, 2025
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2025:1372 Feb 13, 2025
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
python3-podman · RHEL 8 0:4.9.0-3.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
python3-podman · almalinux 8 4.9.0-3.module_el8.10.0+3926+f12484f5 ALSA-2025:1372 Feb 13, 2025
python3-podman · ol 8 0:4.9.0-3.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
runc · RHEL 8 1:1.1.12-6.module+el8.10.0+22722+0028f543 RHSA-2025:1372 Feb 13, 2025
runc · almalinux 8 1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a ALSA-2025:1372 Feb 13, 2025
runc · ol 8 1:1.1.12-6.module+el8.10.0+90509+b5e1e789 ELSA-2025-1372 Feb 13, 2025
runc · rocky 8 1:1.1.12-6.module+el8.10.0+1933+1fc610b1 RLSA-2025:1372 Feb 13, 2025
skopeo · RHEL 8 2:1.14.5-3.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
skopeo · almalinux 8 2:1.14.5-3.module_el8.10.0+3926+f12484f5 ALSA-2025:1372 Feb 13, 2025
skopeo · ol 8 2:1.14.5-3.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
skopeo · rocky 8 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2025:1372 Feb 13, 2025
skopeo-tests · RHEL 8 2:1.14.5-3.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
skopeo-tests · almalinux 8 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2025:1372 Feb 13, 2025
skopeo-tests · ol 8 2:1.14.5-3.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2025:1372 Feb 13, 2025
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3901+4b80ecd7 ALSA-2025:1372 Feb 13, 2025
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2025:1372 Feb 13, 2025
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2025:1372 Feb 13, 2025
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+22417+2fb00970 RHSA-2025:1372 Feb 13, 2025
udica · almalinux 8 0.2.6-21.module_el8.10.0+3926+f12484f5 ALSA-2025:1372 Feb 13, 2025
udica · ol 8 0:0.2.6-21.module+el8.10.0+90449+0b7c8529 ELSA-2025-1372 Feb 13, 2025
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2025:1372 Feb 13, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.