VDB
GO-2024-3171
GO-2024-3171
PUBLISHED
Link Following in github.com/containers/common
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | skopeo | 0, 0, 0 |
| chainguard | buildah | 0, 0, 0 |
| github.com | containers/common | 0, 0 |
| chainguard | skopeo-fips | 0, 0, 0 |
| wolfi | zot | 0, 0, 0 |
| wolfi | podman | 0, 0, 0 |
| chainguard | zot | 0, 0, 0 |
| chainguard | skopeo | 0, 0, 0 |
| chainguard | podman | 0, 0, 0 |
| wolfi | buildah | 0, 0, 0 |
Timeline
- Oct 14, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 18, 2026 Security Advisory
References
- https://github.com/advisories/GHSA-mc76-5925-c5p6 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-9341 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2315691 url
- https://github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go#L169 url
- https://github.com/containers/common/blob/384f77532f67afc8a73d8e0c4adb0d195df57714/pkg/subscriptions/subscriptions.go#L349 url
- https://github.com/containers/common/commit/e7db06585c32e1a782c1d9aa3b71ccd708f5e23f fix
- https://access.redhat.com/security/cve/CVE-2024-9341 advisory