Important: container-tools:rhel8 security and bug fix update

2024-04-2900:00:00

errata.almalinux.org

container-tools

rhel8

security fix

bug fix

podman

buildah

skopeo

runc

cve-2024-1753

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Bug Fix(es):

container_init_t does not possess ptrace process context [almalinux-8.9.0.z] (JIRA:AlmaLinux-28923)

Security Fix(es):

podman: full container escape at build time (CVE-2024-1753)

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64toolbox< 0.0.99.4-5.module_el8.9.0+3755+bc5f21dbtoolbox-0.0.99.4-5.module_el8.9.0+3755+bc5f21db.aarch64.rpm
almalinux8aarch64skopeo-tests< 1.13.3-3.module_el8.9.0+3717+81096349skopeo-tests-1.13.3-3.module_el8.9.0+3717+81096349.aarch64.rpm
almalinux8noarchcontainer-selinux< 2.229.0-1.module_el8.9.0+3755+bc5f21dbcontainer-selinux-2.229.0-1.module_el8.9.0+3755+bc5f21db.noarch.rpm
almalinux8aarch64buildah< 1.31.5-1.module_el8.9.0+3823+03810114buildah-1.31.5-1.module_el8.9.0+3823+03810114.aarch64.rpm
almalinux8aarch64buildah-tests< 1.31.5-1.module_el8.9.0+3823+03810114buildah-tests-1.31.5-1.module_el8.9.0+3823+03810114.aarch64.rpm
almalinux8noarchcockpit-podman< 75-1.module_el8.9.0+3797+9f808d65cockpit-podman-75-1.module_el8.9.0+3797+9f808d65.noarch.rpm
almalinux8noarchpython3-podman< 4.6.0-2.module_el8.9.0+3755+bc5f21dbpython3-podman-4.6.0-2.module_el8.9.0+3755+bc5f21db.noarch.rpm
almalinux8aarch64podman-catatonit< 4.6.1-9.module_el8.9.0+3823+03810114podman-catatonit-4.6.1-9.module_el8.9.0+3823+03810114.aarch64.rpm
almalinux8aarch64criu< 3.18-4.module_el8.9.0+3755+bc5f21dbcriu-3.18-4.module_el8.9.0+3755+bc5f21db.aarch64.rpm
almalinux8aarch64slirp4netns< 1.2.1-1.module_el8.9.0+3643+9234dc3bslirp4netns-1.2.1-1.module_el8.9.0+3643+9234dc3b.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	aarch64	toolbox	< 0.0.99.4-5.module_el8.9.0+3755+bc5f21db	toolbox-0.0.99.4-5.module_el8.9.0+3755+bc5f21db.aarch64.rpm
almalinux	8	aarch64	skopeo-tests	< 1.13.3-3.module_el8.9.0+3717+81096349	skopeo-tests-1.13.3-3.module_el8.9.0+3717+81096349.aarch64.rpm
almalinux	8	noarch	container-selinux	< 2.229.0-1.module_el8.9.0+3755+bc5f21db	container-selinux-2.229.0-1.module_el8.9.0+3755+bc5f21db.noarch.rpm
almalinux	8	aarch64	buildah	< 1.31.5-1.module_el8.9.0+3823+03810114	buildah-1.31.5-1.module_el8.9.0+3823+03810114.aarch64.rpm
almalinux	8	aarch64	buildah-tests	< 1.31.5-1.module_el8.9.0+3823+03810114	buildah-tests-1.31.5-1.module_el8.9.0+3823+03810114.aarch64.rpm
almalinux	8	noarch	cockpit-podman	< 75-1.module_el8.9.0+3797+9f808d65	cockpit-podman-75-1.module_el8.9.0+3797+9f808d65.noarch.rpm
almalinux	8	noarch	python3-podman	< 4.6.0-2.module_el8.9.0+3755+bc5f21db	python3-podman-4.6.0-2.module_el8.9.0+3755+bc5f21db.noarch.rpm
almalinux	8	aarch64	podman-catatonit	< 4.6.1-9.module_el8.9.0+3823+03810114	podman-catatonit-4.6.1-9.module_el8.9.0+3823+03810114.aarch64.rpm
almalinux	8	aarch64	criu	< 3.18-4.module_el8.9.0+3755+bc5f21db	criu-3.18-4.module_el8.9.0+3755+bc5f21db.aarch64.rpm
almalinux	8	aarch64	slirp4netns	< 1.2.1-1.module_el8.9.0+3643+9234dc3b	slirp4netns-1.2.1-1.module_el8.9.0+3643+9234dc3b.aarch64.rpm