CVE-2024-28180

apptainer: This update for apptainer fixes the following issues: - Update to version 1.3.6 - CVE-2024-28180: Fixed an improper...

CVE-2024-28180 is fixed in 42 products on 1 platform, first by DEBIAN-CVE-2024-28180, released March 9, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
4.3
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0196
80th percentile

This update for apptainer fixes the following issues: - Update to version 1.3.6 - CVE-2024-28180: Fixed an improper handling of highly compressed data in go-jose. (bsc#1235211)

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.0-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
aardvark-dns · almalinux 8 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
aardvark-dns · ol 8 2:1.10.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
aardvark-dns · rocky 8 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
apptainer · opensuse-leap 15.6 1.3.6-150600.4.3.1 SUSE-SU-2025:0066-1 Jan 10, 2025
apptainer · sles 15.6 1.3.6-150600.4.3.1 SUSE-SU-2025:0066-1 Jan 10, 2025
buildah · RHEL 8 2:1.33.7-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
buildah · RHEL 9 2:1.33.7-2.el9_4 RHSA-2024:3827 Jun 11, 2024
buildah · almalinux 8 2:1.33.7-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
buildah · almalinux 9 2:1.33.7-2.el9_4 ALSA-2024:3827 Jun 11, 2024
buildah · ol 8 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
buildah · ol 9 2:1.33.7-2.0.1.el9_4 ELSA-2024-3827 Jun 11, 2024
buildah · opensuse-leap 15.6 1.35.4-150500.3.10.1 SUSE-SU-2024:3151-1 Sep 6, 2024
buildah · rocky 8 2:1.33.7-2.module+el8.10.0+1829+9bb2696f RLSA-2024:3968 Jul 2, 2024
buildah · rocky 9 2:1.33.7-2.el9_4 RLSA-2024:3827 Jun 14, 2024
buildah · sles 15.6 1.35.4-150500.3.10.1 SUSE-SU-2024:3151-1 Sep 6, 2024
buildah-tests · RHEL 8 2:1.33.7-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
buildah-tests · RHEL 9 2:1.33.7-2.el9_4 RHSA-2024:3827 Jun 11, 2024
buildah-tests · almalinux 8 2:1.33.7-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
buildah-tests · almalinux 9 2:1.33.7-2.el9_4 ALSA-2024:3827 Jun 11, 2024
buildah-tests · ol 8 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
buildah-tests · ol 9 2:1.33.7-2.0.1.el9_4 ELSA-2024-3827 Jun 11, 2024
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
containerized-data-importer · opensuse-leap 16.0 1.64.0-160000.1.1 OPENSUSE-SU-2026:20279-1 Feb 26, 2026
containernetworking-plugins · RHEL 8 1:1.4.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
containernetworking-plugins · almalinux 8 1:1.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
containernetworking-plugins · ol 8 1:1.4.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
containernetworking-plugins · rocky 8 1:1.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
containers-common · RHEL 8 2:1-81.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
containers-common · almalinux 8 2:1-81.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
containers-common · ol 8 2:1-81.0.1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
containers-common · rocky 8 2:1-81.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
crit · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
crit · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
crit · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
criu · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
criu · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
criu · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
criu · rocky 8 0:3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
criu-devel · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
crun · ol 8 0:1.14.3-2.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
docker · opensuse-leap 15.6 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1 Sep 3, 2024
docker · sles 15.6 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1 Sep 3, 2024
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
golang-github-go-jose-go-jose · Debian 13.5 (trixie) 4.0.1-1 DEBIAN-CVE-2024-28180 Mar 9, 2024
golang-github-go-jose-go-jose · Debian 14 4.0.1-1 DEBIAN-CVE-2024-28180 Mar 9, 2024
golang-gopkg-square-go-jose.v2 · Debian 13.5 (trixie) 2.6.3-1 DEBIAN-CVE-2024-28180 Mar 9, 2024
golang-gopkg-square-go-jose.v2 · Debian 14 2.6.3-1 DEBIAN-CVE-2024-28180 Mar 9, 2024
grafana · opensuse-leap 15.6 10.4.15-150200.3.64.1 SUSE-SU-2025:0623-1 Feb 21, 2025
grafana · sles 15.6 10.4.15-150200.3.64.1 SUSE-SU-2025:0623-1 Feb 21, 2025
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
libslirp · rocky 8 0:4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
nerdctl · amzn 2023 1.7.6-1.amzn2023.0.1 ALAS2023-2024-700 Aug 1, 2024
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
podman · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman · rocky 8 4:4.9.4-3.module+el8.10.0+1829+9bb2696f RLSA-2024:3968 Jul 2, 2024
podman · rocky 9 4:4.9.4-4.el9_4 RLSA-2024:3826 Jun 14, 2024
podman-catatonit · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-catatonit · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-catatonit · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-docker · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-docker · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-docker · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-docker · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-docker · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-docker · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman-gvproxy · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-gvproxy · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-gvproxy · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-plugins · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-plugins · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-plugins · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-plugins · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-plugins · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-plugins · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman-remote · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-remote · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-remote · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-remote · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-remote · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-remote · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
podman-tests · RHEL 8 4:4.9.4-3.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
podman-tests · RHEL 9 4:4.9.4-4.el9_4 RHSA-2024:3826 Jun 11, 2024
podman-tests · almalinux 8 4:4.9.4-3.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
podman-tests · almalinux 9 4:4.9.4-4.el9_4 ALSA-2024:3826 Jun 11, 2024
podman-tests · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-tests · ol 9 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826 Jun 11, 2024
python-podman · rocky 8 0:4.9.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
python3-podman · RHEL 8 0:4.9.0-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
python3-podman · almalinux 8 4.9.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3968 Jun 18, 2024
python3-podman · ol 8 0:4.9.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
runc · RHEL 8 1:1.1.12-1.module+el8.10.0+21974+acd2159c RHSA-2024:3968 Jun 18, 2024
runc · almalinux 8 1:1.1.12-1.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
runc · ol 8 1:1.1.12-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
runc · rocky 8 1:1.1.12-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
skopeo · RHEL 8 2:1.14.3-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
skopeo · RHEL 9 2:1.14.3-2.el9_4 RHSA-2024:2549 Apr 30, 2024
skopeo · almalinux 8 2:1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
skopeo · almalinux 9 2:1.14.3-2.el9_4 ALSA-2024:2549 Apr 30, 2024
skopeo · ol 8 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
skopeo · ol 9 2:1.14.3-2.el9_4 ELSA-2024-2549 May 7, 2024
skopeo · opensuse-leap 15.6 1.14.4-150300.11.11.1 SUSE-SU-2024:1987-1 Jun 11, 2024
skopeo · rocky 8 2:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
skopeo · rocky 9 2:1.14.3-2.el9_4 RLSA-2024:2549 May 10, 2024
skopeo · sles 15.6 1.14.4-150300.11.11.1 SUSE-SU-2024:1987-1 Jun 11, 2024
skopeo-tests · RHEL 8 2:1.14.3-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
skopeo-tests · RHEL 9 2:1.14.3-2.el9_4 RHSA-2024:2549 Apr 30, 2024
skopeo-tests · almalinux 8 2:1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
skopeo-tests · almalinux 9 2:1.14.3-2.el9_4 ALSA-2024:2549 Apr 30, 2024
skopeo-tests · ol 8 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
skopeo-tests · ol 9 2:1.14.3-2.el9_4 ELSA-2024-2549 May 7, 2024
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:3968 Jun 18, 2024
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:3968 Jul 2, 2024
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+21962+8143777b RHSA-2024:3968 Jun 18, 2024
udica · almalinux 8 0.2.6-21.module_el8.10.0+3858+6ad51f9f ALSA-2024:3968 Jun 18, 2024
udica · ol 8 0:0.2.6-21.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
udica · rocky 8 0:0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:3968 Jul 2, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.