File _patchinfo of Package patchinfo.36557

<patchinfo incident="36557">
  <issue tracker="bnc" id="1231698">VUL-0: CVE-2024-9676: buildah,podman,skopeo: github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS)</issue>
  <issue tracker="bnc" id="1231230">VUL-0: CVE-2024-9341: buildah,podman: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library</issue>
  <issue tracker="bnc" id="1231208">VUL-0: CVE-2024-9407: buildah: Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction</issue>
  <issue tracker="bnc" id="1231499">VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary directory mount</issue>
  <issue tracker="bnc" id="1232522">buildah security update changes default network mode from slirp4netns to passt for rootless containers</issue>
  <issue tracker="cve" id="2024-9407"/>
  <issue tracker="cve" id="2024-9676"/>
  <issue tracker="cve" id="2024-9675"/>
  <issue tracker="cve" id="2024-9341"/>
  <packager>dancermak</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for buildah</summary>
  <description>This update for buildah fixes the following issues:

Security issues fixed:

- CVE-2024-9675: cache arbitrary directory mount (bsc#1231499)
- CVE-2024-9407: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208)
- CVE-2024-9676: symlink traversal vulnerability in the containers/storage library can cause denial of service (bsc#1231698)
- CVE-2024-9341: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230)

Non-security issue fixed:

- default to slirp4netns on SLE instead of pasta (bsc#1232522)
</description>
</patchinfo>