{"affected":[{"ecosystem_specific":{"binaries":[{"podman":"4.9.5-1.1","podman-docker":"4.9.5-1.1","podman-remote":"4.9.5-1.1","podmansh":"4.9.5-1.1"}]},"package":{"ecosystem":"SUSE:Linux Micro 6.0","name":"podman","purl":"pkg:rpm/suse/podman&distro=SUSE%20Linux%20Micro%206.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.9.5-1.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for podman fixes the following issues:\n\n- CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file (bsc#1227052).\n\n- Update to version 4.9.5:\n  * Bump to v4.9.5\n  * Update release notes for v4.9.5\n  * fix \"concurrent map writes\" in network ls compat endpoint\n  * [v4.9] Fix for CVE-2024-3727\n  * Disable failing bud test\n  * CI Maintenance: Disable machine tests\n  * [CI:DOCS] Allow downgrade of WiX\n  * [CI:DOCS] Force WiX 3.11\n  * [CI:DOCS] Fix windows installer action\n  * Bump to v4.9.5-dev\n  * Bump to v4.9.4\n  * Update release notes for v4.9.4\n  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786\n  * Add farm command to commands list\n  * Bump to FreeBSD 13.3 (13.2 vanished)\n  * Update health-start-periods docs\n  * Don't update health check status during initialDelaySeconds\n  * image scp: don't require port for ssh URL\n  * Ignore docker's end point config when the final network mode isn't bridge.\n  * Fix running container from docker client with rootful in rootless podman.\n  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9\n  * Bump to v4.9.4-dev\n  * Remove gitleaks scanning\n","id":"SUSE-SU-2025:20013-1","modified":"2025-02-03T08:47:47Z","published":"2025-02-03T08:47:47Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520013-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1227052"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-1753"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-24786"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-3727"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-6104"}],"related":["CVE-2024-1753","CVE-2024-24786","CVE-2024-3727","CVE-2024-6104"],"summary":"Security update for podman","upstream":["CVE-2024-1753","CVE-2024-24786","CVE-2024-3727","CVE-2024-6104"]}