# CVE-2024-1753: buildah: This update for buildah fixes the following issues:  Update to version 1.35.4:  * Bump to Buildah v1.35.4 * CVE-2024-...

CVE-2024-1753 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2024-1753, released March 18, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-1753
- Priority: High
- CVSS: 8.6 (Important)
- EPSS: 0.0046
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Mar 18, 2024

## Description

This update for buildah fixes the following issues:  Update to version 1.35.4:  * Bump to Buildah v1.35.4 * CVE-2024-3727 updates (bsc#1224117) * integration test: handle new labels in 'bud and test --unsetlabel' * Bump go-jose CVE-2024-28180 * Bump ocicrypt and go-jose CVE-2024-28180  Update to version 1.35.3:  * correctly configure /etc/hosts and resolv.conf * buildah: refactor resolv/hosts setup. * CVE-2024-24786 protobuf to 1.33   Update to version 1.35.1:  * CVE-2024-1753 container escape fix (bsc#1221677)  - Buildah dropped cni support, require netavark instead (bsc#1221243)  - Remove obsolete requires libcontainers-image & libcontainers-storage  - Require passt for rootless networking (poo#156955)   Buildah moved to passt/pasta for rootless networking from slirp4netns   (https://github.com/containers/common/pull/1846)  Update to version 1.35.0:  * Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 * conformance tests: don't break on trailing zeroes in layer blobs * Add a conformance test for copying to a mounted prior stage * cgroups: reuse version check from c/common * Update vendor of containers/(common,image) * manifest add: complain if we get artifact flags without --artifact * Use retry logic from containers/common * Vendor in containers/(storage,image,common) * Update module golang.org/x/crypto to v0.20.0 * Add comment re: Total Success task name * tests: skip_if_no_unshare(): check for --setuid * Properly handle build --pull=false * [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 * Update module go.etcd.io/bbolt to v1.3.9 * Revert 'Reduce official image size' * Update module github.com/opencontainers/image-spec to v1.1.0 * Reduce official image size * Build with CNI support on FreeBSD * build --all-platforms: skip some base 'image' platforms * Bump main to v1.35.0-dev * Vendor in latest containers/(storage,image,common) * Split up error messages for missing --sbom related flags * `buildah manifest`: add artifact-related options * cmd/buildah/manifest.go: lock lists before adding/annotating/pushing * cmd/buildah/manifest.go: don't make struct declarations aliases * Use golang.org/x/exp/slices.Contains * Disable loong64 again * Fix a couple of typos in one-line comments * egrep is obsolescent; use grep -E * Try Cirrus with a newer VM version * Set CONTAINERS_CONF in the chroot-mount-flags integration test * Update to match dependency API update * Update github.com/openshift/imagebuilder and containers/common * docs: correct default authfile path * tests: retrofit test for heredoc summary * build, heredoc: show heredoc summary in build output * manifest, push: add support for --retry and --retry-delay * imagebuildah: fix crash with empty RUN * Make buildah match podman for handling of ulimits * docs: move footnotes to where they're applicable * Allow users to specify no-dereference * docs: use reversed logo for dark theme in README * build,commit: add --sbom to scan and produce SBOMs when committing * commit: force omitHistory if the parent has layers but no history * docs: fix a couple of typos * internal/mkcw.Archive(): handle extra image content * stage_executor,heredoc: honor interpreter in heredoc * stage_executor,layers: burst cache if heredoc content is changed * Replace map[K]bool with map[K]struct{} where it makes sense * Replace strings.SplitN with strings.Cut * Document use of containers-transports values in buildah * manifest: addCompression use default from containers.conf * commit: add a --add-file flag * mkcw: populate the rootfs using an overlay * Ignore errors if label.Relabel returns ENOSUP

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | aardvark-dns RHEL 8 | 2:1.10.0-1.module+el8.10.0+21209+52deeb51 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | aardvark-dns almalinux 8 | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | aardvark-dns ol 8 | 2:1.10.0-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | aardvark-dns rocky 8 | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | buildah RHEL 8 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | buildah RHEL 9 | 1:1.31.5-1.el9_3 | [RHSA-2024:2055](https://patchblox.com/security/data/fix/linux/rhsa-2024-2055.md) | Apr 25, 2024 |
| Linux | buildah almalinux 8 | 2:1.33.7-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | buildah almalinux 9 | 1:1.31.5-1.el9_3 | [ALSA-2024:2055](https://patchblox.com/security/data/fix/linux/alsa-2024-2055.md) | Apr 25, 2024 |
| Linux | buildah ol 8 | 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | buildah ol 9 | 1:1.31.5-1.0.1.el9_3 | [ELSA-2024-2055](https://patchblox.com/security/data/fix/linux/elsa-2024-2055.md) | Apr 25, 2024 |
| Linux | buildah opensuse-leap 15.6 | 1.35.4-150500.3.10.1 | [SUSE-SU-2024:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3151-1.md) | Sep 6, 2024 |
| Linux | buildah rocky 8 | 2:1.33.7-1.module+el8.10.0+1825+623b0c20 | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | buildah sles 15.6 | 1.35.4-150500.3.10.1 | [SUSE-SU-2024:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3151-1.md) | Sep 6, 2024 |
| Linux | buildah-tests RHEL 8 | 2:1.33.7-1.module+el8.10.0+21590+d7d75709 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | buildah-tests RHEL 9 | 1:1.31.5-1.el9_3 | [RHSA-2024:2055](https://patchblox.com/security/data/fix/linux/rhsa-2024-2055.md) | Apr 25, 2024 |
| Linux | buildah-tests almalinux 8 | 2:1.33.7-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | buildah-tests almalinux 9 | 1:1.31.5-1.el9_3 | [ALSA-2024:2055](https://patchblox.com/security/data/fix/linux/alsa-2024-2055.md) | Apr 25, 2024 |
| Linux | buildah-tests ol 8 | 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | buildah-tests ol 9 | 1:1.31.5-1.0.1.el9_3 | [ELSA-2024-2055](https://patchblox.com/security/data/fix/linux/elsa-2024-2055.md) | Apr 25, 2024 |
| Linux | cockpit-podman RHEL 8 | 0:84.1-1.module+el8.10.0+21373+0d273fdf | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | cockpit-podman almalinux 8 | 84.1-1.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | cockpit-podman ol 8 | 0:84.1-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | cockpit-podman rocky 8 | 0:84.1-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | conmon RHEL 8 | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | conmon almalinux 8 | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | conmon ol 8 | 3:2.1.10-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | conmon rocky 8 | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | container-selinux RHEL 8 | 2:2.229.0-2.module+el8.10.0+21196+3f0abbca | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | container-selinux almalinux 8 | 2:2.229.0-2.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | container-selinux ol 8 | 2:2.229.0-2.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | container-selinux rocky 8 | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | containernetworking-plugins RHEL 8 | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | containernetworking-plugins almalinux 8 | 1:1.4.0-2.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | containernetworking-plugins ol 8 | 1:1.4.0-2.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | containernetworking-plugins rocky 8 | 1:1.4.0-2.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | containers-common RHEL 8 | 2:1-81.module+el8.10.0+21340+c6c7475a | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | containers-common almalinux 8 | 2:1-81.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | containers-common ol 8 | 2:1-81.0.1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | containers-common rocky 8 | 2:1-81.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | crit RHEL 8 | 0:3.18-5.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | crit almalinux 8 | 3.18-5.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | crit ol 8 | 0:3.18-5.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | criu RHEL 8 | 0:3.18-5.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | criu almalinux 8 | 3.18-5.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | criu ol 8 | 0:3.18-5.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | criu rocky 8 | 0:3.18-5.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | criu-devel RHEL 8 | 0:3.18-5.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | criu-devel almalinux 8 | 3.18-5.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | criu-devel ol 8 | 0:3.18-5.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | criu-libs RHEL 8 | 0:3.18-5.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | criu-libs almalinux 8 | 3.18-5.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | criu-libs ol 8 | 0:3.18-5.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | crun RHEL 8 | 0:1.14.3-2.module+el8.10.0+21340+c6c7475a | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | crun almalinux 8 | 1.14.3-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | crun ol 8 | 0:1.14.3-2.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | crun rocky 8 | 0:1.14.3-2.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | docker opensuse-leap 15.6 | 25.0.6_ce-150000.207.1 | [SUSE-SU-2024:3120-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3120-1.md) | Sep 3, 2024 |
| Linux | docker sles 15.6 | 25.0.6_ce-150000.207.1 | [SUSE-SU-2024:3120-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3120-1.md) | Sep 3, 2024 |
| Linux | fuse-overlayfs RHEL 8 | 0:1.13-1.module+el8.10.0+20412+95ee28e2 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | fuse-overlayfs almalinux 8 | 1.13-1.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | fuse-overlayfs ol 8 | 0:1.13-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | fuse-overlayfs rocky 8 | 0:1.13-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | golang-github-containers-buildah Debian 13.5 (trixie) | 1.33.7+ds1-1 | [DEBIAN-CVE-2024-1753](https://patchblox.com/security/data/fix/linux/debian-cve-2024-1753.md) | Mar 18, 2024 |
| Linux | golang-github-containers-buildah Debian 14 | 1.33.7+ds1-1 | [DEBIAN-CVE-2024-1753](https://patchblox.com/security/data/fix/linux/debian-cve-2024-1753.md) | Mar 18, 2024 |
| Linux | libslirp RHEL 8 | 0:4.4.0-2.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | libslirp almalinux 8 | 4.4.0-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | libslirp ol 8 | 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | libslirp rocky 8 | 0:4.4.0-2.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | libslirp-devel RHEL 8 | 0:4.4.0-2.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | libslirp-devel almalinux 8 | 4.4.0-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | libslirp-devel ol 8 | 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | netavark RHEL 8 | 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | netavark almalinux 8 | 2:1.10.3-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | netavark ol 8 | 2:1.10.3-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | netavark rocky 8 | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.10-1.module+el8.10.0+20565+a40ba0e5 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | oci-seccomp-bpf-hook almalinux 8 | 1.2.10-1.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.10-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | oci-seccomp-bpf-hook rocky 8 | 0:1.2.10-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | podman RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman RHEL 9 | 4:4.9.4-3.el9_4 | [RHSA-2024:2548](https://patchblox.com/security/data/fix/linux/rhsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman almalinux 9 | 4:4.9.4-3.el9_4 | [ALSA-2024:2548](https://patchblox.com/security/data/fix/linux/alsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman ol 9 | 4:4.9.4-3.0.1.el9_4 | [ELSA-2024-2548](https://patchblox.com/security/data/fix/linux/elsa-2024-2548.md) | May 7, 2024 |
| Linux | podman rocky 8 | 4:4.9.4-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | podman rocky 9 | 4:4.9.4-3.el9_4 | [RLSA-2024:2548](https://patchblox.com/security/data/fix/linux/rlsa-2024-2548.md) | May 10, 2024 |
| Linux | podman-catatonit RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-catatonit almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-catatonit ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman-docker RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-docker RHEL 9 | 4:4.9.4-3.el9_4 | [RHSA-2024:2548](https://patchblox.com/security/data/fix/linux/rhsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-docker almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-docker almalinux 9 | 4:4.9.4-3.el9_4 | [ALSA-2024:2548](https://patchblox.com/security/data/fix/linux/alsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-docker ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman-docker ol 9 | 4:4.9.4-3.0.1.el9_4 | [ELSA-2024-2548](https://patchblox.com/security/data/fix/linux/elsa-2024-2548.md) | May 7, 2024 |
| Linux | podman-gvproxy RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-gvproxy almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-gvproxy ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman-plugins RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-plugins RHEL 9 | 4:4.9.4-3.el9_4 | [RHSA-2024:2548](https://patchblox.com/security/data/fix/linux/rhsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-plugins almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-plugins almalinux 9 | 4:4.9.4-3.el9_4 | [ALSA-2024:2548](https://patchblox.com/security/data/fix/linux/alsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-plugins ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman-plugins ol 9 | 4:4.9.4-3.0.1.el9_4 | [ELSA-2024-2548](https://patchblox.com/security/data/fix/linux/elsa-2024-2548.md) | May 7, 2024 |
| Linux | podman-remote RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-remote RHEL 9 | 4:4.9.4-3.el9_4 | [RHSA-2024:2548](https://patchblox.com/security/data/fix/linux/rhsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-remote almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-remote almalinux 9 | 4:4.9.4-3.el9_4 | [ALSA-2024:2548](https://patchblox.com/security/data/fix/linux/alsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-remote ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman-remote ol 9 | 4:4.9.4-3.0.1.el9_4 | [ELSA-2024-2548](https://patchblox.com/security/data/fix/linux/elsa-2024-2548.md) | May 7, 2024 |
| Linux | podman-tests RHEL 8 | 4:4.9.4-1.module+el8.10.0+21632+761e0d34 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-tests RHEL 9 | 4:4.9.4-3.el9_4 | [RHSA-2024:2548](https://patchblox.com/security/data/fix/linux/rhsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-tests almalinux 8 | 4:4.9.4-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | podman-tests almalinux 9 | 4:4.9.4-3.el9_4 | [ALSA-2024:2548](https://patchblox.com/security/data/fix/linux/alsa-2024-2548.md) | Apr 30, 2024 |
| Linux | podman-tests ol 8 | 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | podman-tests ol 9 | 4:4.9.4-3.0.1.el9_4 | [ELSA-2024-2548](https://patchblox.com/security/data/fix/linux/elsa-2024-2548.md) | May 7, 2024 |
| Linux | python-podman rocky 8 | 0:4.9.0-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | python3-criu RHEL 8 | 0:3.18-5.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | python3-criu almalinux 8 | 3.18-5.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | python3-criu ol 8 | 0:3.18-5.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | python3-podman RHEL 8 | 0:4.9.0-1.module+el8.10.0+21196+3f0abbca | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | python3-podman almalinux 8 | 4.9.0-1.module_el8.10.0+3792+03eaed9c | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | python3-podman ol 8 | 0:4.9.0-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | runc RHEL 8 | 1:1.1.12-1.module+el8.10.0+21251+62b7388c | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | runc almalinux 8 | 1:1.1.12-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | runc ol 8 | 1:1.1.12-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | runc rocky 8 | 1:1.1.12-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | skopeo RHEL 8 | 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | skopeo almalinux 8 | 2:1.14.3-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | skopeo ol 8 | 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | skopeo rocky 8 | 2:1.14.3-2.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | skopeo-tests RHEL 8 | 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | skopeo-tests almalinux 8 | 2:1.14.3-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | skopeo-tests ol 8 | 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | slirp4netns RHEL 8 | 0:1.2.3-1.module+el8.10.0+21306+6be40ce7 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | slirp4netns almalinux 8 | 1.2.3-1.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | slirp4netns ol 8 | 0:1.2.3-1.module+el8.10.0+90298+77a9814d | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | slirp4netns rocky 8 | 0:1.2.3-1.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | toolbox RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | toolbox almalinux 8 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | toolbox rocky 8 | 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |
| Linux | toolbox-tests RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | toolbox-tests almalinux 8 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | udica RHEL 8 | 0:0.2.6-21.module+el8.10.0+21672+01ba06ae | [RHSA-2024:3254](https://patchblox.com/security/data/fix/linux/rhsa-2024-3254.md) | May 22, 2024 |
| Linux | udica almalinux 8 | 0.2.6-21.module_el8.10.0+3845+87b84552 | [ALSA-2024:3254](https://patchblox.com/security/data/fix/linux/alsa-2024-3254.md) | May 22, 2024 |
| Linux | udica ol 8 | 0:0.2.6-21.module+el8.10.0+90337+0d7b6e74 | [ELSA-2024-3254](https://patchblox.com/security/data/fix/linux/elsa-2024-3254.md) | May 29, 2024 |
| Linux | udica rocky 8 | 0:0.2.6-21.module+el8.10.0+1815+5fe7415e | [RLSA-2024:3254](https://patchblox.com/security/data/fix/linux/rlsa-2024-3254.md) | Jun 14, 2024 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.