This advisory covers security fixes in podman and buildah tools used for managing containers and pods in Red Hat Enterprise Linux and OpenShift Container Platform. The key vulnerabilities include CVE-2024-1753, a full container escape at build time via buildah, and CVE-2024-24786, an infinite loop in protojson.Unmarshal when handling certain invalid JSON inputs. The vendor has released patched versions to address these issues. Additional bug fixes improve container image handling and compatibility. The advisory applies to multiple Red Hat products and versions, including RHEL 9.x and OpenShift 4.15.x.

Successful exploitation of CVE-2024-1753 allows an attacker to escape container isolation during build time, potentially leading to unauthorized access or control over the host system. CVE-2024-24786 can cause denial of service via an infinite loop when unmarshaling malformed JSON. These vulnerabilities pose a moderate security risk as rated by Red Hat. No known exploits in the wild have been reported at this time.

Red Hat has released official patches for the affected products and versions. Users should apply the updates as detailed in the Red Hat advisories RHSA-2024:2548 and RHSA-2024:2669. Instructions and updated packages are available via Red Hat's customer portal. Applying these updates fully mitigates the described vulnerabilities. No additional mitigation steps are indicated by the vendor.