Lucene search

K
oraclelinuxOracleLinuxELSA-2020-1932
HistoryMay 12, 2020 - 12:00 a.m.

container-tools:ol8 security update

2020-05-1200:00:00
linux.oracle.com
42

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

buildah
[1.11.6-8.0.1]

  • Fixes troubles with oracle registry login [Orabug: 29937283]
    [1.11.6-8]
  • fix ‘CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process’
  • Resolves: #1817742
    [1.11.6-7]
  • fix ‘COPY command takes long time with buildah’
  • Resolves: #1806120
    cockpit-podman
    [12-1]
  • Configure CPU share for system containers
  • Translation updates
    conmon
    [2:2.0.6-1.0.1]
  • Remove upstream references [Orabug: 30871880]
    [2:2.0.6-1]
  • update to 2.0.6
  • Related: RHELPLAN-25139
    containernetworking-plugins
    [0.8.3-5.0.1]
  • Disable debuginfo
    [0.8.3-5]
  • compile with no_openssl
  • Related: RHELPLAN-25139
    podman
    [1.6.4-11.0.1]
  • delivering fix for [Orabug: 29874238] by Nikita Gerasimov
    [1.6.4-11]
  • fix ‘CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process’
  • Resolves: #1817747
    python-podman-api
    [1.2.0-0.2.gitd0a45fe]
  • revert update to 1.6.0 due to new python3-pbr dependency which
    is not in RHEL
  • Related: RHELPLAN-25139
    runc
    [1.0.0-65.rc10]
  • address CVE-2019-19921 by updating to rc10
  • Resolves: #1801887
    skopeo
    [0.1.40-11.0.1]
  • Add oracle registry into the conf file [Orabug: 29845934 31306708]
  • Fix oracle registry login issues [Orabug: 29937192]
    [1:0.1.40-11]
  • add docker.io into the default registry list
  • Related: #1810053

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C