File _patchinfo of Package patchinfo.32911
<patchinfo incident="32911">
<issue tracker="bnc" id="1219563">docker v.25.0 breaks API compatibility with skopeo/buildah [ref:_00D1igLOd._500Tr4rZDT:ref]</issue>
<issue tracker="bnc" id="1220568">Missing cni-plugins in buildah</issue>
<issue tracker="bnc" id="1221677">VUL-0: CVE-2024-1753: buildah: full container escape at build time</issue>
<issue tracker="cve" id="2024-1753"/>
<packager>dancermak</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for buildah</summary>
<description>This update for buildah fixes the following issues:
- CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
- Update to version 1.34.1 for compatibility with Docker 25.0
(which is not in SLES yet, but will eventually be) (bsc#1219563).
See the corresponding release notes:
* https://github.com/containers/buildah/releases/tag/v1.34.1
* https://github.com/containers/buildah/releases/tag/v1.34.0
* https://github.com/containers/buildah/releases/tag/v1.33.0
* https://github.com/containers/buildah/releases/tag/v1.32.0
* https://github.com/containers/buildah/releases/tag/v1.31.0
* https://github.com/containers/buildah/releases/tag/v1.30.0
- Require cni-plugins (bsc#1220568)
</description>
</patchinfo>