Lucene search

RedHatRHSA-2024:0564

HistoryJan 30, 2024 - 12:10 p.m.

(RHSA-2024:0564) Moderate: container-tools:3.0 security update

2024-01-3012:10:11

access.redhat.com

container-tools podman buildah skopeo runc denial of service apparmor cvss unix symlink cve-2022-21698 cve-2023-28642 references page security update.

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
runc: AppArmor can be bypassed when /proc inside the container is symlinked with a specific mount configuration (CVE-2023-28642)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64leslirp4netns-debugsource< 1.1.8-1.module+el8.4.0+21078+a96cfbf6slirp4netns-debugsource-1.1.8-1.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHatanyx86_64containers-common< 1.2.2-8.module+el8.4.0+21078+a96cfbf6containers-common-1.2.2-8.module+el8.4.0+21078+a96cfbf6.x86_64.rpm
RedHatanyppc64lepodman-debugsource< 3.0.1-13.module+el8.4.0+21078+a96cfbf6podman-debugsource-3.0.1-13.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHatanyppc64lefuse-overlayfs-debuginfo< 1.4.0-2.module+el8.4.0+21078+a96cfbf6fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHatanyppc64leskopeo-tests< 1.2.2-8.module+el8.4.0+21078+a96cfbf6skopeo-tests-1.2.2-8.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHatanyx86_64containernetworking-plugins-debugsource< 0.9.1-1.module+el8.4.0+21078+a96cfbf6containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+21078+a96cfbf6.x86_64.rpm
RedHatanyppc64lecontainernetworking-plugins-debugsource< 0.9.1-1.module+el8.4.0+21078+a96cfbf6containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHatanyx86_64runc-debugsource< 1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6runc-debugsource-1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6.x86_64.rpm
RedHatanyppc64lepodman< 3.0.1-13.module+el8.4.0+21078+a96cfbf6podman-3.0.1-13.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHatanynoarchpodman-docker< 3.0.1-13.module+el8.4.0+21078+a96cfbf6podman-docker-3.0.1-13.module+el8.4.0+21078+a96cfbf6.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	slirp4netns-debugsource	< 1.1.8-1.module+el8.4.0+21078+a96cfbf6	slirp4netns-debugsource-1.1.8-1.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHat	any	x86_64	containers-common	< 1.2.2-8.module+el8.4.0+21078+a96cfbf6	containers-common-1.2.2-8.module+el8.4.0+21078+a96cfbf6.x86_64.rpm
RedHat	any	ppc64le	podman-debugsource	< 3.0.1-13.module+el8.4.0+21078+a96cfbf6	podman-debugsource-3.0.1-13.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHat	any	ppc64le	fuse-overlayfs-debuginfo	< 1.4.0-2.module+el8.4.0+21078+a96cfbf6	fuse-overlayfs-debuginfo-1.4.0-2.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHat	any	ppc64le	skopeo-tests	< 1.2.2-8.module+el8.4.0+21078+a96cfbf6	skopeo-tests-1.2.2-8.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHat	any	x86_64	containernetworking-plugins-debugsource	< 0.9.1-1.module+el8.4.0+21078+a96cfbf6	containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+21078+a96cfbf6.x86_64.rpm
RedHat	any	ppc64le	containernetworking-plugins-debugsource	< 0.9.1-1.module+el8.4.0+21078+a96cfbf6	containernetworking-plugins-debugsource-0.9.1-1.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHat	any	x86_64	runc-debugsource	< 1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6	runc-debugsource-1.0.0-77.rc95.module+el8.4.0+21078+a96cfbf6.x86_64.rpm
RedHat	any	ppc64le	podman	< 3.0.1-13.module+el8.4.0+21078+a96cfbf6	podman-3.0.1-13.module+el8.4.0+21078+a96cfbf6.ppc64le.rpm
RedHat	any	noarch	podman-docker	< 3.0.1-13.module+el8.4.0+21078+a96cfbf6	podman-docker-3.0.1-13.module+el8.4.0+21078+a96cfbf6.noarch.rpm

Rows per page:

1-10 of 1051