Moderate: container-tools:4.0 security and bug fix update

2022-11-0800:00:00

errata.almalinux.org

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

74.2%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)
golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)
runc: incorrect handling of inheritable capabilities (CVE-2022-29162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchpython3-podman< 4.0.0-1.module_el8.6.0+2877+8e437bf5python3-podman-4.0.0-1.module_el8.6.0+2877+8e437bf5.noarch.rpm
almalinux8noarchudica< 0.2.6-3.module_el8.6.0+2886+d33c3efbudica-0.2.6-3.module_el8.6.0+2886+d33c3efb.noarch.rpm
almalinux8noarchcockpit-podman< 46-1.module_el8.7.0+3344+5bcd850fcockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux8noarchcontainer-selinux< 2.189.0-1.module_el8.7.0+3344+5bcd850fcontainer-selinux-2.189.0-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux8x86_64podman-catatonit< 4.0.2-8.module_el8.7.0+3344+5bcd850fpodman-catatonit-4.0.2-8.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux8x86_64crun< 1.5-1.module_el8.7.0+3344+5bcd850fcrun-1.5-1.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux8x86_64fuse-overlayfs< 1.9-1.module_el8.7.0+3344+5bcd850ffuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux8x86_64aardvark-dns< 1.0.1-35.module_el8.7.0+3344+5bcd850faardvark-dns-1.0.1-35.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux8x86_64skopeo-tests< 1.6.2-5.module_el8.7.0+3344+5bcd850fskopeo-tests-1.6.2-5.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux8x86_64libslirp-devel< 4.4.0-1.module_el8.6.0+2877+8e437bf5libslirp-devel-4.4.0-1.module_el8.6.0+2877+8e437bf5.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	python3-podman	< 4.0.0-1.module_el8.6.0+2877+8e437bf5	python3-podman-4.0.0-1.module_el8.6.0+2877+8e437bf5.noarch.rpm
almalinux	8	noarch	udica	< 0.2.6-3.module_el8.6.0+2886+d33c3efb	udica-0.2.6-3.module_el8.6.0+2886+d33c3efb.noarch.rpm
almalinux	8	noarch	cockpit-podman	< 46-1.module_el8.7.0+3344+5bcd850f	cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux	8	noarch	container-selinux	< 2.189.0-1.module_el8.7.0+3344+5bcd850f	container-selinux-2.189.0-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux	8	x86_64	podman-catatonit	< 4.0.2-8.module_el8.7.0+3344+5bcd850f	podman-catatonit-4.0.2-8.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux	8	x86_64	crun	< 1.5-1.module_el8.7.0+3344+5bcd850f	crun-1.5-1.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux	8	x86_64	fuse-overlayfs	< 1.9-1.module_el8.7.0+3344+5bcd850f	fuse-overlayfs-1.9-1.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux	8	x86_64	aardvark-dns	< 1.0.1-35.module_el8.7.0+3344+5bcd850f	aardvark-dns-1.0.1-35.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux	8	x86_64	skopeo-tests	< 1.6.2-5.module_el8.7.0+3344+5bcd850f	skopeo-tests-1.6.2-5.module_el8.7.0+3344+5bcd850f.x86_64.rpm
almalinux	8	x86_64	libslirp-devel	< 4.4.0-1.module_el8.6.0+2877+8e437bf5	libslirp-devel-4.4.0-1.module_el8.6.0+2877+8e437bf5.x86_64.rpm