Moderate: container-tools security update

2024-07-0200:00:00

errata.almalinux.org

container-tools module

podman

buildah

skopeo

runc

golang-protobuf

security update

AI Score

7.2

Confidence

Low

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchcockpit-podman< 84.1-1.module_el8.10.0+3858+6ad51f9fcockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8noarchpython3-podman< 4.9.0-1.module_el8.10.0+3792+03eaed9cpython3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm
almalinux8noarchudica< 0.2.6-21.module_el8.10.0+3858+6ad51f9fudica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8noarchcontainer-selinux< 2.229.0-2.module_el8.10.0+3858+6ad51f9fcontainer-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux8noarchpodman-docker< 4.9.4-4.module_el8.10.0+3862+c5a22a8dpodman-docker-4.9.4-4.module_el8.10.0+3862+c5a22a8d.noarch.rpm
almalinux8aarch64podman-catatonit< 4.9.4-4.module_el8.10.0+3862+c5a22a8dpodman-catatonit-4.9.4-4.module_el8.10.0+3862+c5a22a8d.aarch64.rpm
almalinux8aarch64criu-devel< 3.18-5.module_el8.10.0+3858+6ad51f9fcriu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.aarch64.rpm
almalinux8aarch64skopeo-tests< 1.14.4-1.module_el8.10.0+3862+c5a22a8dskopeo-tests-1.14.4-1.module_el8.10.0+3862+c5a22a8d.aarch64.rpm
almalinux8aarch64runc< 1.1.12-1.module_el8.10.0+3845+87b84552runc-1.1.12-1.module_el8.10.0+3845+87b84552.aarch64.rpm
almalinux8aarch64podman-remote< 4.9.4-4.module_el8.10.0+3862+c5a22a8dpodman-remote-4.9.4-4.module_el8.10.0+3862+c5a22a8d.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	cockpit-podman	< 84.1-1.module_el8.10.0+3858+6ad51f9f	cockpit-podman-84.1-1.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	noarch	python3-podman	< 4.9.0-1.module_el8.10.0+3792+03eaed9c	python3-podman-4.9.0-1.module_el8.10.0+3792+03eaed9c.noarch.rpm
almalinux	8	noarch	udica	< 0.2.6-21.module_el8.10.0+3858+6ad51f9f	udica-0.2.6-21.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	noarch	container-selinux	< 2.229.0-2.module_el8.10.0+3858+6ad51f9f	container-selinux-2.229.0-2.module_el8.10.0+3858+6ad51f9f.noarch.rpm
almalinux	8	noarch	podman-docker	< 4.9.4-4.module_el8.10.0+3862+c5a22a8d	podman-docker-4.9.4-4.module_el8.10.0+3862+c5a22a8d.noarch.rpm
almalinux	8	aarch64	podman-catatonit	< 4.9.4-4.module_el8.10.0+3862+c5a22a8d	podman-catatonit-4.9.4-4.module_el8.10.0+3862+c5a22a8d.aarch64.rpm
almalinux	8	aarch64	criu-devel	< 3.18-5.module_el8.10.0+3858+6ad51f9f	criu-devel-3.18-5.module_el8.10.0+3858+6ad51f9f.aarch64.rpm
almalinux	8	aarch64	skopeo-tests	< 1.14.4-1.module_el8.10.0+3862+c5a22a8d	skopeo-tests-1.14.4-1.module_el8.10.0+3862+c5a22a8d.aarch64.rpm
almalinux	8	aarch64	runc	< 1.1.12-1.module_el8.10.0+3845+87b84552	runc-1.1.12-1.module_el8.10.0+3845+87b84552.aarch64.rpm
almalinux	8	aarch64	podman-remote	< 4.9.4-4.module_el8.10.0+3862+c5a22a8d	podman-remote-4.9.4-4.module_el8.10.0+3862+c5a22a8d.aarch64.rpm