shield Security update for podman

SUSE-SLE-Micro-5.4-2025-579

This update for podman fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227052) - CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of CONTINUATION frames read for an HTTP/2 request in golang.org/x/net/http2. (bsc#1236507)

• Release Date
  Feb 18 2025
• References
  Bugzilla: 1227052, 1236507
  CVEs: CVE-2024-6104, CVE-2023-45288
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.4 s390x

• Packages
  podman
  Daemon-less container engine for managing containers, pods and images

  4.9.5-150400.4.38.1 lock rpm lock src

  podman-remote
  Client for managing podman containers remotely

  4.9.5-150400.4.38.1 lock rpm

SUSE Linux Enterprise Micro 5.4 aarch64

• Packages
  podman
  Daemon-less container engine for managing containers, pods and images

  4.9.5-150400.4.38.1 lock rpm lock src

  podman-remote
  Client for managing podman containers remotely

  4.9.5-150400.4.38.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

• Packages
  podman
  Daemon-less container engine for managing containers, pods and images

  4.9.5-150400.4.38.1 lock rpm lock src

  podman-remote
  Client for managing podman containers remotely

  4.9.5-150400.4.38.1 lock rpm