Important: container-tools:4.0 security update

2024-04-2900:00:00

errata.almalinux.org

container-tools podman buildah skopeo runc security update cve-2024-1753 references unix

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

buildah: full container escape at build time (CVE-2024-1753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchcockpit-podman< 46-1.module_el8.7.0+3344+5bcd850fcockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux8noarchcontainer-selinux< 2.205.0-3.module_el8.9.0+3687+dcd7ef8fcontainer-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.noarch.rpm
almalinux8noarchudica< 0.2.6-4.module_el8.9.0+3821+d7d58347udica-0.2.6-4.module_el8.9.0+3821+d7d58347.noarch.rpm
almalinux8noarchpython3-podman< 4.0.0-2.module_el8.9.0+3821+d7d58347python3-podman-4.0.0-2.module_el8.9.0+3821+d7d58347.noarch.rpm
almalinux8noarchpodman-docker< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1podman-docker-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.noarch.rpm
almalinux8x86_64podman-tests< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1podman-tests-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.x86_64.rpm
almalinux8x86_64criu-libs< 3.15-3.module_el8.9.0+3817+215c128bcriu-libs-3.15-3.module_el8.9.0+3817+215c128b.x86_64.rpm
almalinux8x86_64buildah-tests< 1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1buildah-tests-1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1.x86_64.rpm
almalinux8x86_64libslirp< 4.4.0-1.module_el8.9.0+3821+d7d58347libslirp-4.4.0-1.module_el8.9.0+3821+d7d58347.x86_64.rpm
almalinux8x86_64aardvark-dns< 1.0.1-38.module_el8.9.0+3627+db8ec155aardvark-dns-1.0.1-38.module_el8.9.0+3627+db8ec155.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	cockpit-podman	< 46-1.module_el8.7.0+3344+5bcd850f	cockpit-podman-46-1.module_el8.7.0+3344+5bcd850f.noarch.rpm
almalinux	8	noarch	container-selinux	< 2.205.0-3.module_el8.9.0+3687+dcd7ef8f	container-selinux-2.205.0-3.module_el8.9.0+3687+dcd7ef8f.noarch.rpm
almalinux	8	noarch	udica	< 0.2.6-4.module_el8.9.0+3821+d7d58347	udica-0.2.6-4.module_el8.9.0+3821+d7d58347.noarch.rpm
almalinux	8	noarch	python3-podman	< 4.0.0-2.module_el8.9.0+3821+d7d58347	python3-podman-4.0.0-2.module_el8.9.0+3821+d7d58347.noarch.rpm
almalinux	8	noarch	podman-docker	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1	podman-docker-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.noarch.rpm
almalinux	8	x86_64	podman-tests	< 4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1	podman-tests-4.0.2-26.module_el8.9.0+3821+d7d58347.alma.1.x86_64.rpm
almalinux	8	x86_64	criu-libs	< 3.15-3.module_el8.9.0+3817+215c128b	criu-libs-3.15-3.module_el8.9.0+3817+215c128b.x86_64.rpm
almalinux	8	x86_64	buildah-tests	< 1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1	buildah-tests-1.24.7-1.module_el8.9.0+3821+d7d58347.alma.1.x86_64.rpm
almalinux	8	x86_64	libslirp	< 4.4.0-1.module_el8.9.0+3821+d7d58347	libslirp-4.4.0-1.module_el8.9.0+3821+d7d58347.x86_64.rpm
almalinux	8	x86_64	aardvark-dns	< 1.0.1-38.module_el8.9.0+3627+db8ec155	aardvark-dns-1.0.1-38.module_el8.9.0+3627+db8ec155.x86_64.rpm