Lucene search

OracleLinuxELSA-2023-6938

HistoryNov 18, 2023 - 12:00 a.m.

container-tools:4.0 security and bug fix update

2023-11-1800:00:00

linux.oracle.com

buildah

cockpit-podman

conmon

containernetworking-plugins

containers-common

container-selinux

criu

crun

fuse-overlayfs

libslirp

oci-seccomp-bpf-hook

podman

python-podman

runc

skopeo

unix

cve-2023-29406

cve-2022-41724

cve-2022-41725

cve-2023-24538

cve-2023-24534

cve-2023-24536

cve-2022-41723

cve-2023-24539

cve-2023-24540

related: #2176055

related: #2179943

related: #2187341

related: #2187359

related: #2203677

related: #2207505

related: #2061390

related: #2179944

related: #2187342

related: #2187360

related: #2203693

related: #2207506

orabug: 33473101

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

buildah
[1:1.24.6-7]

rebuild for CVE-2023-29406
Related: #2176055
[1:1.24.6-6]
rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
Resolves: #2179943
Resolves: #2187341
Resolves: #2187359
Resolves: #2203677
Resolves: #2207505
cockpit-podman
[46-1]
update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46
Related: #2061390
conmon
[2:2.1.4-2]
update to https://github.com/containers/conmon/releases/tag/v2.1.4
Related: #2176055
containernetworking-plugins
[1:1.1.1-5]
add Epoch in Provides
Related: #2176055
[1:1.1.1-4]
rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
Resolves: #2179944
Resolves: #2187342
Resolves: #2187360
Resolves: #2203693
Resolves: #2207506
containers-common
[1-38.0.1]
Updated removed references [Orabug: 33473101] (Alex Burmashev)
Adjust registries.conf (Nikita Gerasimov)
remove references to RedHat registry (Nikita Gerasimov)
container-selinux
[2:2.205.0-3]
fix build for stable module
Related: #2176055
criu
crun
[1.8.3-1]
fix could not find symbol criu_set_lsm_mount_context in libcriu.so
Related: #2176055
fuse-overlayfs
[1.9-2]
update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.9
Related: #2176055
libslirp
oci-seccomp-bpf-hook
[1.2.5-2]
fix compatibility with the new bcc
Related: #2176055
podman
[2:4.0.2-24]
rebuild for CVE-2023-29406
Related: #2176055
[2:4.0.2-23]
rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
Resolves: #2179945
Resolves: #2187315
Resolves: #2187361
Resolves: #2203678
Resolves: #2207507
python-podman
[4.0.0-2]
bump to v4.0.0
Related: #2176055
runc
[1:1.1.5-2]
rebuild for following CVEs:
CVE-2022-41724
Resolves: #2179971
skopeo
[2:1.6.2-8]
rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
Resolves: #2179946
Resolves: #2187316
Resolves: #2187362
Resolves: #2203679
Resolves: #2207508

OSVersionArchitecturePackageVersionFilename
oracle linux8srcbuildah< 1.24.6-7.modulebuildah-1.24.6-7.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srccockpit-podman< 46-1.modulecockpit-podman-46-1.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srcconmon< 2.1.4-2.moduleconmon-2.1.4-2.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srccontainer-selinux< 2.205.0-3.modulecontainer-selinux-2.205.0-3.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srccontainernetworking-plugins< 1.1.1-5.modulecontainernetworking-plugins-1.1.1-5.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srccontainers-common< 1-38.0.1.modulecontainers-common-1-38.0.1.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srccriu< 3.15-3.modulecriu-3.15-3.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srccrun< 1.8.3-1.modulecrun-1.8.3-1.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srcfuse-overlayfs< 1.9-2.modulefuse-overlayfs-1.9-2.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux8srclibslirp< 4.4.0-1.modulelibslirp-4.4.0-1.module+el8.9.0+90044+a34bc939.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	buildah	< 1.24.6-7.module	buildah-1.24.6-7.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	cockpit-podman	< 46-1.module	cockpit-podman-46-1.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	conmon	< 2.1.4-2.module	conmon-2.1.4-2.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	container-selinux	< 2.205.0-3.module	container-selinux-2.205.0-3.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	containernetworking-plugins	< 1.1.1-5.module	containernetworking-plugins-1.1.1-5.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	containers-common	< 1-38.0.1.module	containers-common-1-38.0.1.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	criu	< 3.15-3.module	criu-3.15-3.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	crun	< 1.8.3-1.module	crun-1.8.3-1.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	fuse-overlayfs	< 1.9-2.module	fuse-overlayfs-1.9-2.module+el8.9.0+90044+a34bc939.src.rpm
oracle linux	8	src	libslirp	< 4.4.0-1.module	libslirp-4.4.0-1.module+el8.9.0+90044+a34bc939.src.rpm