/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-6qh3-hgp8-47hw

Published

Last updated

https://images.chainguard.dev/security/CGA-6qh3-hgp8-47hw
Package

rancher-agent-2.9

Repository

Chainguard

Latest Update
Pending upstream fix
Aliases
  • CVE-2024-29018
  • GHSA-mq39-4gv4-mvpx

Severity

7.5

High

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-29018

Updates

Status

Pending upstream fix

Impact

Rancher pins this older version of Docker in the project’s replace block of the go.mod file despite a newer major version being defined in the requires block. This is intentional as there have been minor version changes within the v20.x.x pinned dependency while the more recent version defined in the requires block has jumped major versions throughout time. Upgrading the docker version in the replaces block and the relevant dependencies causes build breaking failures which shows code changes are required. This will require upstream to implement a fix.

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing