Get real-time updates on Telegram

Red Hat Security Advisory: OpenShift Container Platform 4.12.54 packages and security update

CVE-2024-1394, CVE-2024-24786, CVE-2024-28180 affects buildah. EPSS 0.01533 (percentile 0.73923), scored 2026-10-03. Fixed version: 1:1.23.4-5.2.rhaos4.12.el8. Fixed version: 1:1.23.4-5.2.rhaos4.12.el8. Fixed version: 1:1.23.4-5.2.rhaos4.12.el8. Fixed version: 1:1.23.4-5.2.rhaos4.12.el8. Fixed version: 1:1.23.4-5.2.rhaos4.12.el8. Fixed version: 0:0.16.0-2.2.rhaos4.12.el8. Fixed version: 0:0.16.0-2.2.rhaos4.12.el8. Fixed version: 0:0.16.0-2.2.rhaos4.12.el8. Fixed version: 0:0.16.0-2.2.rhaos4.12.el8. Fixed version: 1:1.4.0-1.1.rhaos4.12.el8. Fixed version: 1:1.4.0-1.1.rhaos4.12.el8.

CVE

CVE-2024-1394, CVE-2024-24786, CVE-2024-28180

Product

buildah

CCR priority

0.4 /100 (P5)

CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · OSV.dev

EPSS

0.01533 · percentile 0.73923 · 2026-10-03

KEV

no

Affected products

• buildah · Fixed version: 1:1.23.4-5.2.rhaos4.12.el8
• buildah-debuginfo · Fixed version: 1:1.23.4-5.2.rhaos4.12.el8
• buildah-debugsource · Fixed version: 1:1.23.4-5.2.rhaos4.12.el8
• buildah-tests · Fixed version: 1:1.23.4-5.2.rhaos4.12.el8
• buildah-tests-debuginfo · Fixed version: 1:1.23.4-5.2.rhaos4.12.el8
• butane · Fixed version: 0:0.16.0-2.2.rhaos4.12.el8
• butane-debuginfo · Fixed version: 0:0.16.0-2.2.rhaos4.12.el8
• butane-debugsource · Fixed version: 0:0.16.0-2.2.rhaos4.12.el8
• butane-redistributable · Fixed version: 0:0.16.0-2.2.rhaos4.12.el8
• containernetworking-plugins · Fixed version: 1:1.4.0-1.1.rhaos4.12.el8
• containernetworking-plugins-debuginfo · Fixed version: 1:1.4.0-1.1.rhaos4.12.el8
• containernetworking-plugins-debugsource · Fixed version: 1:1.4.0-1.1.rhaos4.12.el8
• cri-o · Fixed version: 0:1.25.5-13.1.rhaos4.12.git76343da.el8
• cri-o-debuginfo · Fixed version: 0:1.25.5-13.1.rhaos4.12.git76343da.el8
• cri-o-debugsource · Fixed version: 0:1.25.5-13.1.rhaos4.12.git76343da.el8
• cri-tools · Fixed version: 0:1.25.0-2.2.el8
• cri-tools-debuginfo · Fixed version: 0:1.25.0-2.2.el8
• cri-tools-debugsource · Fixed version: 0:1.25.0-2.2.el8
• ignition · Fixed version: 0:2.14.0-7.1.rhaos4.12.el8
• ignition-debuginfo · Fixed version: 0:2.14.0-7.1.rhaos4.12.el8
• ignition-debugsource · Fixed version: 0:2.14.0-7.1.rhaos4.12.el8
• ignition-validate · Fixed version: 0:2.14.0-7.1.rhaos4.12.el8
• ignition-validate-debuginfo · Fixed version: 0:2.14.0-7.1.rhaos4.12.el8
• openshift-clients · Fixed version: 0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8
• openshift-clients-redistributable · Fixed version: 0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8
• podman · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-catatonit · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-catatonit-debuginfo · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-debuginfo · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-debugsource · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-docker · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-gvproxy · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-gvproxy-debuginfo · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-plugins · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-plugins-debuginfo · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-remote · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-remote-debuginfo · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• podman-tests · Fixed version: 3:4.4.1-2.1.rhaos4.12.el8
• runc · Fixed version: 3:1.1.6-5.2.rhaos4.12.el8
• runc-debuginfo · Fixed version: 3:1.1.6-5.2.rhaos4.12.el8
• runc-debugsource · Fixed version: 3:1.1.6-5.2.rhaos4.12.el8
• skopeo · Fixed version: 2:1.9.4-3.2.rhaos4.12.el8
• skopeo-debuginfo · Fixed version: 2:1.9.4-3.2.rhaos4.12.el8
• skopeo-debugsource · Fixed version: 2:1.9.4-3.2.rhaos4.12.el8
• skopeo-tests · Fixed version: 2:1.9.4-3.2.rhaos4.12.el8
• buildah · Fixed version: 1:1.23.4-5.2.rhaos4.12.el9
• buildah-debuginfo · Fixed version: 1:1.23.4-5.2.rhaos4.12.el9
• buildah-debugsource · Fixed version: 1:1.23.4-5.2.rhaos4.12.el9
• buildah-tests · Fixed version: 1:1.23.4-5.2.rhaos4.12.el9
• buildah-tests-debuginfo · Fixed version: 1:1.23.4-5.2.rhaos4.12.el9
• cri-o · Fixed version: 0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9
• cri-o-debuginfo · Fixed version: 0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9
• cri-o-debugsource · Fixed version: 0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9
• cri-tools · Fixed version: 0:1.25.0-2.2.el9
• cri-tools-debuginfo · Fixed version: 0:1.25.0-2.2.el9
• cri-tools-debugsource · Fixed version: 0:1.25.0-2.2.el9
• ignition · Fixed version: 0:2.14.0-5.2.rhaos4.12.el9
• ignition-debuginfo · Fixed version: 0:2.14.0-5.2.rhaos4.12.el9
• ignition-debugsource · Fixed version: 0:2.14.0-5.2.rhaos4.12.el9
• ignition-validate · Fixed version: 0:2.14.0-5.2.rhaos4.12.el9
• ignition-validate-debuginfo · Fixed version: 0:2.14.0-5.2.rhaos4.12.el9
• openshift-clients · Fixed version: 0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el9
• openshift-clients-redistributable · Fixed version: 0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el9
• podman · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-catatonit · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-catatonit-debuginfo · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-debuginfo · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-debugsource · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-docker · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-gvproxy · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-gvproxy-debuginfo · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-plugins · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-plugins-debuginfo · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-remote · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-remote-debuginfo · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• podman-tests · Fixed version: 3:4.2.0-7.2.rhaos4.12.el9
• skopeo · Fixed version: 2:1.9.4-3.2.rhaos4.12.el9
• skopeo-debuginfo · Fixed version: 2:1.9.4-3.2.rhaos4.12.el9
• skopeo-debugsource · Fixed version: 2:1.9.4-3.2.rhaos4.12.el9
• skopeo-tests · Fixed version: 2:1.9.4-3.2.rhaos4.12.el9
• buildah · Fixed version: 1:1.29.1-20.3.rhaos4.15.el8
• buildah-debuginfo · Fixed version: 1:1.29.1-20.3.rhaos4.15.el8
• buildah-debugsource · Fixed version: 1:1.29.1-20.3.rhaos4.15.el8
• buildah-tests · Fixed version: 1:1.29.1-20.3.rhaos4.15.el8
• buildah-tests-debuginfo · Fixed version: 1:1.29.1-20.3.rhaos4.15.el8
• butane · Fixed version: 0:0.20.0-1.1.rhaos4.15.el8
• butane-debuginfo · Fixed version: 0:0.20.0-1.1.rhaos4.15.el8
• butane-debugsource · Fixed version: 0:0.20.0-1.1.rhaos4.15.el8
• butane-redistributable · Fixed version: 0:0.20.0-1.1.rhaos4.15.el8
• containernetworking-plugins · Fixed version: 1:1.4.0-1.2.rhaos4.15.el8
• containernetworking-plugins-debuginfo · Fixed version: 1:1.4.0-1.2.rhaos4.15.el8
• containernetworking-plugins-debugsource · Fixed version: 1:1.4.0-1.2.rhaos4.15.el8
• cri-o · Fixed version: 0:1.28.4-8.rhaos4.15.git24f50b9.el8
• cri-o-debuginfo · Fixed version: 0:1.28.4-8.rhaos4.15.git24f50b9.el8
• cri-o-debugsource · Fixed version: 0:1.28.4-8.rhaos4.15.git24f50b9.el8
• cri-tools · Fixed version: 0:1.28.0-3.1.el8
• cri-tools-debuginfo · Fixed version: 0:1.28.0-3.1.el8
• cri-tools-debugsource · Fixed version: 0:1.28.0-3.1.el8
• openshift-clients · Fixed version: 0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el8
• openshift-clients-redistributable · Fixed version: 0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el8
• ose-aws-ecr-image-credential-provider · Fixed version: 0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el8
• podman · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-catatonit · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-catatonit-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-debugsource · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-docker · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-gvproxy · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-gvproxy-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-plugins · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-plugins-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-remote · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-remote-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• podman-tests · Fixed version: 3:4.4.1-21.1.rhaos4.15.el8
• runc · Fixed version: 4:1.1.12-1.1.rhaos4.15.el8
• runc-debuginfo · Fixed version: 4:1.1.12-1.1.rhaos4.15.el8
• runc-debugsource · Fixed version: 4:1.1.12-1.1.rhaos4.15.el8
• skopeo · Fixed version: 2:1.11.2-21.2.rhaos4.15.el8
• skopeo-debuginfo · Fixed version: 2:1.11.2-21.2.rhaos4.15.el8
• skopeo-debugsource · Fixed version: 2:1.11.2-21.2.rhaos4.15.el8
• skopeo-tests · Fixed version: 2:1.11.2-21.2.rhaos4.15.el8
• buildah · Fixed version: 1:1.29.1-20.3.rhaos4.15.el9
• buildah-debuginfo · Fixed version: 1:1.29.1-20.3.rhaos4.15.el9
• buildah-debugsource · Fixed version: 1:1.29.1-20.3.rhaos4.15.el9
• buildah-tests · Fixed version: 1:1.29.1-20.3.rhaos4.15.el9
• buildah-tests-debuginfo · Fixed version: 1:1.29.1-20.3.rhaos4.15.el9
• cri-o · Fixed version: 0:1.28.4-8.rhaos4.15.git24f50b9.el9
• cri-o-debuginfo · Fixed version: 0:1.28.4-8.rhaos4.15.git24f50b9.el9
• cri-o-debugsource · Fixed version: 0:1.28.4-8.rhaos4.15.git24f50b9.el9
• cri-tools · Fixed version: 0:1.28.0-3.1.el9
• cri-tools-debuginfo · Fixed version: 0:1.28.0-3.1.el9
• cri-tools-debugsource · Fixed version: 0:1.28.0-3.1.el9
• ignition · Fixed version: 0:2.16.2-2.1.rhaos4.15.el9
• ignition-debuginfo · Fixed version: 0:2.16.2-2.1.rhaos4.15.el9
• ignition-debugsource · Fixed version: 0:2.16.2-2.1.rhaos4.15.el9
• ignition-validate · Fixed version: 0:2.16.2-2.1.rhaos4.15.el9
• ignition-validate-debuginfo · Fixed version: 0:2.16.2-2.1.rhaos4.15.el9
• openshift-clients · Fixed version: 0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el9
• openshift-clients-redistributable · Fixed version: 0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el9
• ose-aws-ecr-image-credential-provider · Fixed version: 0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el9
• podman · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-debugsource · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-docker · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-gvproxy · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-gvproxy-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-plugins · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-plugins-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-remote · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-remote-debuginfo · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• podman-tests · Fixed version: 3:4.4.1-21.1.rhaos4.15.el9
• runc · Fixed version: 4:1.1.12-1.1.rhaos4.15.el9
• runc-debuginfo · Fixed version: 4:1.1.12-1.1.rhaos4.15.el9
• runc-debugsource · Fixed version: 4:1.1.12-1.1.rhaos4.15.el9
• skopeo · Fixed version: 2:1.11.2-21.2.rhaos4.15.el9
• skopeo-debuginfo · Fixed version: 2:1.11.2-21.2.rhaos4.15.el9
• skopeo-debugsource · Fixed version: 2:1.11.2-21.2.rhaos4.15.el9
• skopeo-tests · Fixed version: 2:1.11.2-21.2.rhaos4.15.el9

Provenance

• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-1394.html